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This invention relates to collaboration among users in a networked workstation system, i.e. a real-time 
computer-based cooperative, multi-user environment, through a mufti-user interface. More specifically, the 
invention relates to the manner in which shared structured data objects containing some form of data are 
s represented and controlled in a collaborative system, together with means for presenting status and tracking 
information in a brief summary or compressed version to users so that the users are simultaneously aware 
of current changes to the status and activities in regard to shared structured data objects. 

In a multi-user interface in a collaborative system, there must be an interface utility that permits multi- 
users to participate simultaneously and share access to information relative to their participation. Such an 
io interface may start from the so-called WYSIW1S ("What You See Is What I See") abstraction (which is 
pronounced "wizzy whiz"). This abstraction may be used to guide the multi-user interface design in a strict 
sense, i.e., where users see exactly the same image of information, i.e., all user's images are identical, and 
also users can see where users are cursively pointing to and changing information. On the other hand, this 
abstraction may be used to guide the multi-user interface design in a relaxed sense, i.e., wherein the 
15 images are not necessarily all identical at the same time with respect to one or more attributes, such as, 
display space, currency of displayed information, time of displayed information and congruence of view. 
The user interface of this invention falls in the relaxed WYSIWIS category. 

A wide variety of user interface techniques is known for enabling more than one user to access a 
structured data object. In some techniques, a structured data object is displayed to only one user at a time, 
20 while in others, a structured data object is displayed to a number of users at the same time. 

Recently, more attention has been given to multi-user environments and collaborative type systems and 
their user interfaces to provide for free and friendly accessibility among different users to shared data via, 
for example, structured data objects, and access and control of. such shared data. An example of recent 
attention in collaborative environment research work was the Conference on Computer-Supported Cooperat- 
25 ive Work (CSCW f 86) held in December 3-5, 1986, in Austin, Texas and the published proceedings from 
that conference. 

The term, "structured data object", is used herein to mean genericaily a data object that contains a 
series of other data objects linked together in a predetermined manner which may or may not include a 
visual representation or functional abstraction on a display screen. Such data objects may have an 

30 associated set of operations and be linked to one another for one or more functional purposes. Examples of 
structured data objects are electronic versions of the following: (1) A multi-page document wherein each 
page is a data object linked to both preceding and subsequent pages, which are data objects, in a 
predetermined order; (2) A workspace or desktop, as defined by the display screen per se which contains 
multiple structured data objects, e.g., file folders or documents, which, in turn, may contain other structured 

35 data objects. For example, a file folder may contain several documents, other file folders or a file drawer. A 
structured data object that is capable of holding other structured data objects is also referred to in the art as 
a "container", e.g., a file folder is a container for documents. An example of a container is the file folder of 
the Macintosh Computer of Apple Computer, Inc., which, when opened on the display, may contain a 
plurality of other file folders displayed in their iconic representation of individual folders, and (3) A hypertext 

40 linked structured data object wherein individual workspaces or text windows themselves may be linked 
together in a predetermined manner. The term "structured data objects" includes "display objects", 
"container" and "display system object". 

The present invention deals with the employment of such structured data objects in a shared multi-user 
environment. In this context, the term "shared structure object" has reference to a structured data object 

45 that is accessible to more than one user through network-coupled display workstations. 

As is known, the representation and display of structured data objects in a workstation environment may 
take various forms. A common technique is to present the contents or entries of structured data objects in a 
display region or workspace, such as a view window, on a CRT display. In order to maintain an unclustered 
display area in the displayed setting, however, it may be useful to provide a shrunken or small representa- 

50 tion of the structured data object such as an iconic representation, when a user is not engaging in activities 
relating to the structured data object. Such a representation of data may take the form of iconic 
representations of different structured data objects positioned on a workspace of a display screen, e.g., a 
display illustrating an office desktop metaphor employing various abstractions of a typical office environ- 
ment, representative of real office objects, both physically accessible directly while seated at a desk or 

55 physically accessible only by moving from a desk to another office location away from the desk. Examples 
of these abstractions are a desktop, inbasket, outbasket. documents, file folders and "books", which 
contains two or more consecutive document portions which together comprise a complete document. An 
example of such an office metaphor is the ViewPointTM ("VP") software system available from Xerox 
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Corporation in connection with its 8010 and 6085 display workstations. 

A "book" in the Viewpoint software system is a structured data object of the container type, and is a 
special directory that creates a relationship among the document portions that are contained in the book. 
Consecutive documents in a book can share a single page number series, so that each document or a 
selected order of selected documents in the book automatically inherit sequential page numbering 
proceeding from document to document of the book. Also, scrolling from one document will automatically 
continue into the next sequential document Further, there is a facility to create automatically a table of 
contents and index for the book which will automatically include content and indexing material into the table 
and index created relative to each document in the book. Lastly, the book will print as a single document. 
However, there is no facility in Viewpoint books for sharing the same book with other users. Each user may 
have a copy of the same book on his workstation, like any other document, but there is no facility for 
sharing information concerning the status and tracking of revisions created by other users to a book or 
documents contained in a book. 

The Viewpoint ("VP") software system includes a form of "shared" structured data objects in the form 
of the file drawer abstraction, described in "Filing", VP Series Reference Library, Version 1.0, Xerox 
Corporation, 1985, pp. 1-60. As described at pages 4-7 and 20-21, a file drawer stores information on a 
remote file' server, which is a physically-remote accessible device so that the iconic representation is 
referred to as a reference icon on the desktop and is shown in half tone to represent this remote state. 
Structured data objects, such as file folders and documents digitally stored in a file drawer, can be shared 
20 by many users, in accordance with access rights, as illustrated at pages 40-43, i.e., users with access rights 
can access copies of data objects from the same file drawer. A file drawer is represented on the display by 
a relatively small icon with a pictorial file drawer representation with a name appearing within the 
representation. By a sequence of keyboard and mouse signals, the user can select the icon and request an 
<OPEN> operation, in which case a window appears on the display workspace showing the file drawer 
25 contents, as described and shown at pages 9-10 and 32-34. Unless covered by a window, the file drawer 
icon remains visible in shadow form while the file drawer window remains in its opened state. The user can 
subsequently close the file drawer window, in which case, the window disappears and the icon resumes its 
original solid iconic appearance. The ViewPoint system also includes other reference icons described at 
pages 11-15, 22-25 and 49-60, which can also be used to access in read-only form a "shared" structured 
30 data object. 

Thus, relative to "shared" structured data objects located in a remote digital storage facility or file 
' service represented as a file drawer abstraction of the desktop, it is important to note that access of a 
structured data object is possible by multiple users having proper access rights to the file drawer for 
placing a digital copy of a. structured data object on the user's desktop for subsequent manipulation, editing, 

35 revision, insertion of new material, etc. In this sense, several users may access and share the same data or 
the same structured data objects, but individual users would be unaware of any changes made by other 
users unless other users restored the modified version of the structured data object back into the same file 
drawer and, further, other users periodically checked to see if and when an updated version of the 
structured data object may have been so restored, absent an electronic or phone message to other users 

40 informing them of the restored, updated revision. 

interleaf Technical Publishing Software Reference Manual, Release 3.0, Vol. 1, 1986, pp. 15-1 
through 15-18 and 16-1 through 16-19 describes features of Technical Publishing Software (TPS) that can 
■ be used similarly to the ViewPoint system's reference icons. Desktop links, described beginning at page 15- 
12. can be used to share files throughout a network, enabling a user to link to objects on other user's 

45 desktops, as further described at pages 15-17 and 15-18. In addition, every desktop has access to objects 
in the System cabinet through "desktop links". A link icon points to a real file stored elsewhere on a user's 
workstation or on a remote storage facility on a local area network. Using links allows multiple users to 
change simultaneously different parts of a shared data object, e.g.. a publication. However, there is no 
efficient means available for providing information relative to shared file status and tracking. 

so Link permissions and ownership are described beginning at page 15-13, and the Document Locked 
stickup is described beginning at page 15-15 in the TPS Reference Manual. This stickup, shown in Fig. 15- 
9, includes a message with information about the lock on a document, as would occur if the document were 
already open, either through a link or at another workstation using the same desktop. The use of desktop 
links in a book, a special directory that creates a relationship among documents it contains, is described 

55 beginning at page 16-18. 

There are references in the art for providing information to users of shared data about the activities of 
other users. S. K. Sarin et ai, "Software for Interactive On-Line Conferences,"Proceed/ngs ACM-SIGOA 
Conference on Office Information Systems, Toronto, Canada, June 25-27, 1984. describe a real-time 
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conferencing system, RTCAL, in which a number of conference participants can each see a shared bitmap 
in a screen region, as shown in Fig. 3-2. Each user has a pointing device, such as a display cursor mouse, 
and when a bitmap server that supports the shared bitmap receives input indicating pointing activity by one 
of the users, that user's cursor is updated on every user's bitmap, as described in Section 3 at pages 15 
5 and 18. 

S. K. Sarin, Interactive On-Line Conferences, Ph.D. thesis, M.l.T. Department of Electrical Engineer- 
ing and Computer Science, May 1984, also describes RTCAL, at pages 201-206. Elsewhere, at pages 47- 
57, Sarin describes JEDI, a real-time joint document editing system that includes a status window showing 
who is in a conference and other useful information about users, as described at pages 48 and 52 in 

70 relation to Fig. 2-4 and at page 57 in relation to a participant leaving a conference. Sarin discusses status 
information more generally at pages 75-78, pointing out ways in which a user can know what other users 
are doing and looking at. On page 78, Sarin points out that not all status information may fit on a user's 
screen at once and suggests allocating a small amount of screen space to a main summary, with more 
detailed information available when needed by a "pop-up" viewport. Sarin further suggests special 

rs notification of significant changes in conference status, accompanied by an attention-getting mechanism, 
such as a bell ringing or flashing part of the screen, where the notification appears. Pages 206-213 describe 
"MBIink", in which each user can see the cursor positions of each user's workstation mouse. Pages 214- 
227 describe "XMBIink", a design that extends this feature. 

S. K. Sarin et al, "Computer-Based Real-Time Conferencing Systems, "Computer, pp. 33-45, October 

20 1985, describe at page 34 a number of other systems providing information about activities of other users. 
Fig. 1 shows a summary window that provides further information about other users in a conference, and an 
events window that displays important changes in status, such as when a user is leaving or joining the 
conference or the passing of control to others, as described at page 36. 

I. Greif et al, "Atomic Data Abstractions in a Distributed Collaborative Editing System. "Proceedings of 

25 the ACM Symposium on Principles of Programming Languages, St. Petersburg, FL, pp. 160-172, January 
1986, describe a distributed collaborative editing system called "CES." The functionality and design of CES 
are described at pages 164-165, including the sharing of documents among multiple authors. While a 
"tickle" lock is held, small actions made by the owner are committed after certain editing commands and 
remain visible when the lock is released. Screens of all readers of text that is being modified are updated at 

30 regular intervals as each small action commits. 

Gregg Foster,Ccia6, Tools for Computer-Based Cooperation, University of California, Computer 
Science Division, Berkeley, California, Report No. UCB/CSD 84/215, 1984, describes the use of Re- 
moteMice, personalized images of mouse cursors active on remote machines, at page 13. The relaxation of 
WYSIWIS ("What You See Is What I See"), discussed at page 8, permits differences between the views of 

35 a display object seen by different users, which could be implemented by associating windows of different 
sizes or screen positions or by providing visible remote cursors only on demand. 

Gregg Foster in his Ph.D. Thesis, Collaborative Systems and Multi-user Interfaces, University of 
California, Computer Science Division, 1986. (and later in G. Foster et al, "Cognoter, Theory and Practice of 
a Colab-orative Tool," Proceedings of the Conference on Computer-Supported Collaborative Work, 

40 Austin, Texas, December 3-5, 1986. pp. 7-15) defines a multi-user interface as a human-machine interface 
coordinated for several users sharing information at the same time, at page 35. At page 36, Foster 
discusses the use in multi-user applications of compressed versions of windows in which general activity is 
discernible but details are suppressed, and suggests this as an approach to the screen space problem. Fig. 
4.1 shows a shared window that is seen on the display of each participant in a session using Cognoter, a 

45 program that provides a multi-user interface and a structured meeting process. Fig. 4.3 shows how a 
number of windows may appear during a Cognoter session, with some windows overlapping others. Tables 
4.1. 4.2 and 4.3 show a "Scrunch" operation that shrinks a display window. At page 87, Foster discusses 
busy signals, illustrated in Fig. 4.9, that signal potential conflict between users by greying-out items being 
edited, moved or grouped by other users. 

so L. N. Garrett et a[, "Intermedia: Issues. Strategies, and Tactics in the Design of a Hypermedia 
Document System, Proceedings of the Conference on Computer-Supported Collaborative Work, Austin, 
Texas, pp. 163-174, December 3-5, 1986, describes Intermedia, a system that was publicly described. 
Documents in Intermedia are linked, and a user can select a link marker and issue a command to cause the 
document at the other end of the link to be activated with information presented in a window. Fig. 2 shows 

55 how a link marker can be an icon conveying the nature of the information at the end of the link. A multi-user 
environment for a hypermedia system is described beginning at page 171. Options for notification of 
updates by other users, discussed on page 173, include immediate update, immediate notification, passive 
notification and no notification. One goal is a "seamless" environment over a large corpus of documents 
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available to multiple users. This reference also, at page 173, refers to different aspects of the notion of 
notification of updates in a multi-user environment in that there are four possible ways a system couid 
respond to other users relative to changes made to a system object: (1) provide an immediate update; (2) 
provide an immediate notification; (3) provide passive notification and (4) no notification. The last notion 
5 would not provide any formal notification of changes, but rather, the next time a document is opened, 
changes made by the user would somehow be reflected in the reopened document. 

M. Stefik et a[, "Knowledge Programming in Loops: Report on an Experimental Course," The Al Magazine, 
pp. 3-13, Fall 1983, describe Trucking a workstation board game in which each player has an iconic truck 
representation, as shown and described in relation to Fig. 5. Each player can have a separate workstation. 

to Gauges described at pages 6-9 indicate the fuel, weight, and volume of each player's truck, and that can be 
concurrently observed by other players. Stefik, M.J., Bobrow, D.G. and Kahn, K.M.. "Integrating Access- 
Oriented Programming into a Multiparadigm Environment, 19 IEEE Software, pp.1 0-1 8, January 1986 also 
describe gauges at pages 14-15 and Truckin' at pages 16-17. 

US-A-4,525,779 describes a conversational video system capable of providing interactive conversational 

75 video data communications between pairs of users, and that enables multiple conversations to be carried 
out by a given user in real-time, as shown and described in relation to Figs. 1-2. The display at a keystation 
can be divided into a plurality of areas that can inciude first and second conversation areas or a first 
conversation area and an area for retrieved data, as shown and described in relation to Fig. 11 and Figs. 
10A-10F. Another feature is an incoming calls area of the display, containing brief details of incoming calls 

20 and their interest messages, and the user may accept one of the incoming calls shown in order to have it 
displayed in one of the conversation areas. A user can list others from whom he is not prepared to accept 
calls, using a CALL INHIBIT function, or can specify a list of others to whom a call is directed using a CALL 
LIST function, as shown and described in relation to Figs. 14-43. 

D. B. Leblang et al, "Computer-Aided Software Engineering in a Distributed Workstation Environment," 

25 in Henderson, P., (Ed.). Proceedings of the ACM SiGSOFT/SlGPLAN Software Engineering Symposium 
on Practical Software Development Environments, Pittsburgh, PA, April 23-24, 1984, describe DSEE, a 
software development environment As described and shown on the fifth and sixth pages, each user of a 
group of users can view the items completed by other users immediately, as a reference to the completed 
item. 

30 G. Foster et al, "Cognoter, Theory and practice of a Colab-orative Tool", Proceedings of the 
Conference on Computer-Supported Collaborative Work, Austin, TX, pp. 7-15, December 3-5, 1986, 
describes a computer program called "Cognoter" for use in a multi-user environment to provide collabora- 
tion among users participating in a group activity, such as a presentation, e.g., a talk or paper, wherein each 
user has an annotated outline of ordered ideas and associated text in a shared user interface present at 

35 each workstation. The user interface provides a visual indication to other users that a displayed item is 
undergoing alteration by another user. 

In the article of M. Stefik et al, "WYSiWIS Revised: Early Experiences with Multi-User Interfa- 
ces, "Proceedings of the Conference on Computer-Supported Cooperative Work, Austin, Texas, pp. 
276-290, December 3-5, 1986, there is a discussion at page 285, column one, about the problem in using 

40 the program, "Cognoter", supra , that, when the windows are shrunk or reduced to their static icon 
representation, it is no longer possible for a user to access quickly where a group activity is from moment 
to moment. The suggestion is made that, unlike conventional static icons, an icon representing the activity 
should somehow actively indicate when information concerning the group activity is changing. However, 
there no indication or suggestion in this paper as to how this suggestion would be visualized or 

45 implemented. 

Relative to monitoring information among different users in a multi-user environment, there is known in 
the art the use of "system models" to monitor the activities of programmers working on different software 
modules together comprising a software system and determine how to rebuild or compile the system when 
one or more modules have been changed without losing modules or pointers to their remote locations. See, 

so for example. US-A-4,558,413, which corresponds to the dissertation of Eric Emerson Schmidt, entitled 
"Controlling Large Software Development in a Distributed Environment", University of California, 
Berkeley, approved November, 1982, Brian T. Lewis, "Experience With a System for Controlling Software 
Versions in a Distributed Environment", Proceedings of the Symposium on Application and Assessment 
of Automated Tools for Software Development, IEEE and University of Texas at Austin, San Francisco, 

55 CA, November 1-3, 1983, and K. Marzullo et al, "Jasmine: A Software System Modelling Facility", 
Proceedings of the Symposium on Practical Software Development Environments. Palo Alto, CA, 
December 9-11, 1986, SIGPLAN Notices, Vol 22(1), pp 121-130, January 1987. The system models used 
contain unique identifiers that are representative, for example, of a particular software module and contain 
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pointers to information concerning its name, current version, its dependency on other software modules and 
its pathname to the storage facility where the module resides. However, there is no means provided for 
individual users to access visually on reduced-scale or summarized basis, an entry detail representation of 
the current status of each module or part or entry of such a system, the current activity as to any particular 

s module or part and whether access is available relative to a particular module or part. 

A concept of a shared structured data object is disclosed in the published article of David K. Gifford, 
"Violet, An Experimental Decentralized System", CSL-79-12, Xerox Palo Alto Research Center, September, 
1979. Violet is a decentralized information system with implementation at the file service wherein informa- 
tion is shared among multi-users. The user interface disclosed pertains to a shared appointment calendar 

10 wherein a user can take control of data entry to be made in a common appointment calendar by invoking a 
write transaction which sets an "intention-write lock". This lock is not final until converted into a "commit 
lock" so that a final write to the calendar for all users to see is arbitrated among multi-users relative to the 
first to commit after set of the intention-write lock by writing data to the user's displayed representation of 
the calendar. 

is It is a principal object of this invention to provide a means for displaying a representation indicative of 
the status of, and tracking changes to, shared structured data objects accessible as a mufti-user application 
in a real-time collaborative environment without the need for keeping track of or identifying any of the 
remote instances of the representation. Thus, it is a prime objective of this invention to provide a multi-user 
environment and collaborative type system with a user interface that provides for free and friendly 

20 accessibility among different users to shared structured data objects and managing the shared structured 
data object throughout its life cycle to permit users to concentrate more on the structured data object 
substance processes and less on the management and production coordination processes. 

Accordingly this invention provides a multi-user data communication system which is as claimed in the 
respective appended claims. The present invention further provides techniques by which the WYSIWIS user 

25 interface aspects of the representation can be used to present detailed quantitative information about the 
real-time extent of changes or modifications to the shared structured data object or its contents on a 
demand notification/update basis. Further, user access control also provides exclusivity or privacy to 
invoked changes to parts of the shared structured data object without interference from other users, but with 
an indication to the other users of access control attributes, thereby providing coordinated consistency 

30 among users relative to changes to ail parts of the shared structured data object. 

One aspect of the invention is based on the recognition of a basic problem in a collaborative system, 
i.e. a real-time computer-based cooperative environment. A user can often benefit from knowing the state of 
activities of other users even when that user is not actively engaged in such activities with the other users. 
For example, a user may need tracking information relating to statistics or status relative to the activities of 

35 other users to make decisions about future plans for such activities or a determination when to join in the 
group activities. In a collaborative system that permits concurrent access to shared data by more than one 
user, a user may wish to rejoin a group viewing shared data when the group has reached a certain stage in 
its work, or when another user joins the group activities. Or, if the system allows more than one subgroup, a 
user in one subgroup may need information about the progress of another subgroup. But a conventional 

40 collaborative system does not permit a user, to monitor activities of other users conveniently unless the user 
is viewing the same data along with other users. 

This aspect of the invention is further based on the recognition that this problem can be solved by 
displaying to the user a representation that includes detailed information about the activities of other users 
relating to shared data in a shared structured data object utilized in a collaborative system. Because the 

45 representation is small or of reduced scale, it does not interfere with the user's view of other objects 
present in the workspace on the workstation display desktop. A user can leam the current state of an 
activity by direct access to and view of the reduced size representation, making it unnecessary to view the 
shared data until the user is ready to do so or until a desired state or level of activity is reached. At that 
point, the user can begin working on the shared data by selecting the reduced size representation and 

so designating a particular entry or entries identified in the representation and open them up for view and 
editing in full size presentation of the particular entry. 

A variety of techniques may be used to indicate the activities of other users of the shared structured 
data object. When there is a change in data in a structured data object within a shared structured data 
object, the detailed representation could include a flickering indicator, for example. If the shared data are 

55 presented to each user as a display object or within a workspace, such as a display window, each 
representation may include the current version of that display object or workspace, with systematic 
distortions to enable a user to recognize it, and with updating to indicate recent changes to the data. The 
representation could include an indication of which users are currently viewing and editing a particular entry 
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within the shared structured data object rec0 gnition that a user viewing a representation of a 

Another aspect of the invention ,s basec ^^^^ on how mu ch change other users have 
shared structured data object » ^ to rJ^2^ct or on h6w rapidly other users are making 
made in the shared data of the shared structured data odj ^ ^ ^ ^ data wlth ^ 

changes. When other users have made J^J data object When other users 

changes or may wish to update a local ^nce °f *e shared ^ ^ ^ 

structured data object representing one or mo re ela ted 1 struct works tation S connected to a 

can be concurrently accessed by different J^ S 

common linK. The WYS1W1S user ^^^^^V^ data object and various attributes of 
ordered listing of such entries that ar % m ^ "f entV the revision number of the shared structured data 
each listed entry, inter alia, the type and class o entry^the , ^ ^ date Qf to 

object; the numbers-pages and ^^^^e^D. accessed by a user and, if not. who has 
and last revision of each such entry; «^*^^ n £?, 8 preS ent on a user's system; and a provision 
prevented such access; whether a local instance of an entry s P ^ ^ js prov ded for 

ter miscellaneous notes or <»«^ object and its entries on a user .n.tiated 

maintaining current information relative o the ( *JJ^*^ h ation require s updated «n«orn«6on to 
demand updated basis invoked by a user JTJ f k* |ng up one or more data entries by an 

fmSemenUhe operation properiy. ^^^^^J^J 1 ^ users, to prevent concurrent 
individual user and thereby prevent access to th ej ocKe ^ ^ connectloni edlttn g or 

editing and other changes to the same entnes by *wor mo ^ or entrjes 

modification cannot be performed by a user g^J^™^ and othe r information relative to he 
been locked up. Visual indication as to the lock ® d * aie . jn ^ shared structured data object 

Sng user and the time of lock, is "P«* "£r ^ op^ on the 8t««^ 

epVesentation present at user workstations ^^ 7*" representation is completely decentralized 

^^^^ 

- — user init,al ,nvok,ng 

° f 3 tT — w^ SSS-- by way of example by referring to the following description taken ,n 
conjunction with 9 ~ oHice information system for il.ustrating the shared 

inClUd8S 3 

a^shiuo: - ed°^ ured data object as may be viewed on a 

workstation display shown in *Q- V - - reviously created shared structured data object as may be 

Fig. 4 illustrates a property sheet for a prev. ou y 
viewed on a workstation display shown in Rg. ; jn ^ shared structured data object 

Figs. 8A and 88 illustrate a «mph^ vetwon. > bject 

menu having been previously °P e ^; shared struCtu red data object shown in Rg. 2; 

Rg. 10 illustrates the pop-up menu for me snareu 
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Rg. 11 illustrates an example of an open folder of. local files for the shared structured data object 
shown in Rg. 2; 

Rg. 12 illustrates an example of an open folder of remote files for the shared structured data object 
shown in Rg. 2; 

5 Rg. 13 is a flowchart representation of a basic algorithmic procedure performed by the implementa- 

tion of this invention, and 

Rgs. 14 and 15 are flowcharts of other algorithmic procedures performed by the implementation of 
this invention. 

10 

A. Background Discussion and General Features. 

General features of this invention can be understood with reference to the figures in explaining in detail 

is the collaborative environment of this invention utilizing a shared structured data object as used in a 
publication management system modeled after "job dockets", a common publishing shop tool. However, it 
should be understood that the shared structured data object representation of this invention has other 
applications. For example, the shared structured data object representation of this invention could be 
utilized in a hypertext type system, e.g., NoteCards or a hierarchical database retrieval system. 

20 Job dockets include drafts of text and illustrations, galleys and page proofs, specifications for design 
and layout correspondence, and production schedules. A "job sheet" is often pasted on a docket's cover to 
identify the job and list its production schedule, e.g., a list of tasks to be accomplished, scheduled dates for 
completion, and individual worker assignments. Job dockets are passed from one worker to another as each 
job step is completed. Unlike a job docket, however, shared structured data objects are intended to allow 

25 several professional users to edit or otherwise work concurrently on the same publication. 

Publication or job management is a broad area encompassing topics as diverse as security, document 
history, and scheduling of publication jobs. There are three key categories of publication management: 
storage and retrieval, document binding, and job management. 

A key requirement for any publication or job management system is support for efficiently finding, 

30 retrieving, and storing the correct revisions of documents. This must include all document information. A 
document is more than the sum of its parts. At the very least, the system must manage all the information 
necessary to reproduce the document. Beside content that belongs to just the document, this information 
might include style and layout rules, spelling dictionaries, boilerplate content shared among several 
documents, and information obtained by following links and cross references to other publications. The 

35 publication management system should manage such related information as contracts, specifications, 
correspondence, production schedules, and accounting data. The system must also manage any important 
derived information. This is information which is computed solely from publication entries in order to, for 
example, reduce the time needed for some operations. Specific examples include symbol table information 
needed to resolve cross references between parts and Interpress or Postscript page description files for 

40 printing of the publication. 

Publications or documents are changed, modified and updated over time, which results in a sequence 
of revisions over time. Some documents are short-lived, while others have a long revision history in which 
the functionality of publication management is paramount These long-lived publications typically have 
major revisions that correspond to releases of the document. For example, a user's manual for a 

45 spreadsheet package is usually revised for each release of the package. It is desirable for a publication 
management system to be able to reproduce specific older revisions of a document as well as the current 
revision. Some publications also have, at certain times, multiple concurrent versions. For example, a 
computer user's manual might have several different versions, one for each computer model on which a 
software application runs. These different but related, parallel versions have their own independent revision 

so histories which the publication management facility should manage separately. The facility should be able to 
recreate specific revisions within each separate version thread. If older revisions are not likely to be 
retrieved often, they can be archived into a slow-to-access but low cost per bit digital storage facility. 

The publication or job management system in the modern office must store information reliably. It must 
safeguard data despite computer or network failures or attempts by unauthorized people to modify 

55* information. Loss or corruption of information can have financial, if not sometimes also legal, consequences. 
Often there are tight deadlines and it is unacceptable to be forced to recreate a document from other 
sources. The system must prevent two different users from attempting to modify the same information at 
the same time. Part of the difficulty in management is in locating correct and current revisions of 
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Ration and ensuring that revisions are -J* ^ - r on - » 

documents. Also to be noted is that £ %?£^J£Z&t£^ Motor. Corporation is allowed 
over time, even among the same ^^^^^ m auto mobile after a draft of this pub..cation has 
to alter or revise the owner's manual safety copy 

been approved by the corporate legal dep a pub , icati on's content and layout objects, e.g 
Binding a publication typically cons.sts °!j^ n c ^ feTences to those objects. It may also .nclude 
sections, figures, footnotes, and pages. ^J^^S, and indexes. Binding is typically done by 
the generation of front and back matter such as tables ; of come ^ ^ publjcation consists of 

2, e'ditor program, not by the pubta^n manage ^^L^ will require the assistance ^he 

P sr^ * ~ pans and omer neede 

^When sever, people are working o^^^^Z^^^'^ 
publication is consistent. A publication is P artS mUSt alS0 ^ * ! Ton 

numbered and cross referenced J"j2S«i!> »° iler P ,ate content ** mf0rmat, ° h n , 

revisions of such auxiliary information as style n ^^ '° m Jsewhere Although an editor program might 
belongs to just the publication or is "imported f ^ ^J mwement fu^on. Cross refeferu« 

, dement the consistency ch ecki ^^^^^^ ^ ^ kMP ^* ? ^ 
to other publications must also be identical. The dolmen * « doC ument is consistent, 

and binding information for each part in order f j *2^SSn?th. production of documents. It assets 
A pubLtion management facility offers support w0 P rk . lt may als0 include support for 

in planning tasks and responsibilities and .n tracking the information. Besides assistance for 
esSng'the cost of jobs and for ™-'*2n2^^"^ ^ ^TheTJb 
producing individual documents, a ^ bma ^t^nts Jd reports of jobs currently in progress. The job 
Ludes peak-.oad reports for P"^^^^^^ work roles involved in publish.ng: or 
management system should recogmze e d. e ^ ^ different requ ,re- 

exam 9 p,e ^&^SX» revise a job, accounting information although 

t^pe^^^ system, They must accommodate 

Flexibility is another requirement for P^catio" ma ^ g ^ ^ w||| Qften refuse t0 

different production styles. Most P ub,,sh, " 9 m ^^ job management system, 

change their existing procedures to -c^mo** ™"Z ocum J ts or publications has always required 
3S in the modem office, manag.ng long-l.ved, mult, part doc afQ produced by a team of 

additional time for office worker, Th.s ^^^pT^ork together to produce a document 
peoole and undergo frequent rev,s,on Whjn^J^ requires work. This includes locating curren and 
coordinating and tracking the progress of their work also _requ ' . the .. e , ec t r0 nic office", the 

?e -seS revLns of the ^^^^^^L. Mistakes are occasionally made. 
<o publication management is still done primary ^^ a ™ ^ |QSS o{ inforrn ation. 

W hich lead to increased cost, m.ssed deadlines ^^ m ftructUfBd d ata object representation supports 
The collaborative system of th.s .nvention J v °* n 9 a * e tem of xerox Corporation 

multi-user publication management on the 1 jnformat ion system consists of a number of 

a nd its document processing < J^eWk S shared file, communication, and print service, 
4S workstations linked by an Ethernet local area network o ^ on m gervices but flles 

Each workstation has its own local ^^S^^^^ VP also has a distributed ™J 
must be manually copied between workstations ^ejv manua , ^ coordinated 

system. These existing facilities help .n P^P™^^ 0 inform ation about status and coordination o 
ettort and. therefore, are subject to error, ^^^^l^ and when the publication cons,sts of 
so effort, This is especially true when S *™*2 ^ Q \IZ ™ simultaneously edit separate copies of the 

accessible to more than one user, m r« H 
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displaying shared data represented by the object and its contents, whether as a simple display object as 
the contents of the entire display screen, or as the contents of any workspace, whether the workspace is 
thought of as a room, a window, a blackboard, a sketchpad, a spreadsheet, a card or any other type of 
entity for presenting data within an area of a display. A representation may be at full scale, occupying a 

s substantial part of the display area, in which case the details of the shared data will ordinarily be visible to a 
viewer, albeit in some mapped form, such as a sequence of characters or a bitmapped graphical object. 
Such a body of shared structured data objects may be amenable to many different full scale representa- 
tions, as when a document can be displayed page-by-page in a desired sequence. A representation may 
also be at a small scale, occupying a small part of the display area, in which case, the details of the shared 

io structured data object may not be visible. A small scale representation may also be a small portion of the 
full scale representation of the same shared data, showing details relating in specific ways to or attributes of 
the shared structured data object; it could be a shrunken version of the full scale representation of a 
structured data object, showing some general features of the full scale representation but omitting details; a 
reduced scale representation could aiso be an icon or other small display abstraction that shows virtually 

75 none of the features or attributes of the full scale representation other than an identifier such as a name or 
configuration of a structured data object. 

Because of the limits of human perception and the typical display size, the smallest reduced scale 
representations of a structured data object frequently have a fixed size of about a 25 mm square or less, 
e.g., an icon symbol. The size of a reduced scale representation is typically large enough to have a 

20 characteristic shape and an identifier. Such a representation may not itself enable the user to access the 
corresponding data, but it may typically be selected as part of an operation to obtain a full scale 
representation of the corresponding data. Full scale representations, on the other hand, are often variable in 
size and can range from larger rectangles up to the full available display area, typically enabling a user to 
select a display object within the full scale representation upon which an operation is to be performed, 

25 resulting in access to the corresponding data. Many conventional graphical user interfaces have readily 
identifiable full scale and reduced scale representations of data, respectively, such as windows and icons. 
The structured data object representation of this invention involves attributes of both reduced scale and full 
scale representations. 

Reference is now made to a typical office information system 10 illustrated in Fig. 1. System 10 

30 includes an Ethernet local area network (LAN) 12, to which a number of user workstations 14, including 
workstations 14A and 14B, are connected. Workstations 14 may be, for example, the Xerox 6085 
professional workstation. LAN 12 may also have other office-connected equipment, such as network file 
server 16, network fiie/mail/communication server 18, printer server 20 and printer 22. Also, a large capacity 
remote storage facility, such as a UNIX mini computer 24, may be connected to LAN 12. System 10 is a 

as collaborative type system, meaning that it enables users at different workstations 14 to work together in 
real-time by processing and passing information among one another and storing and retrieving information 
from storage services 16 and 24 via network 12. The collaborative functions of system 10 could aiso be 
centralized in a single main CPU, could be distributed among processors at the workstations, or could be 
provided in any combination of centralization and distribution. Similarly, LAN 12 could take any appropriate 

40 configuration capable of providing the necessary communications to support collaboration. 

System 10 includes display-based user interfaces, with each workstation 14 including a display device 
and a user input device. In this connection, workstations 14A and 14B illustratively include respective CRT 
display screens 26 and 28 and keyboards 25, each with a display cursor mouse 30. System 10 includes an 
object oriented display system that comprises iconic representations of different structured data objects 

45 positioned on a workspace of a display screen, e.g., a display illustrating an office desktop metaphor 
employing various abstractions of a typical office environment, representative of real office objects. 
Examples of these abstractions in Fig. 1 are a desktop 32, inbasket 33, outbasket 34, documents 35 and 
35A, file folder 36, file drawer 37 and printer 38. Document icon 35A is shown "opened", in that an 
<OPEN> command has been invoked and opened window 35B has appeared displaying the document in 

so full scale. Printer 38 is an iconic representation of printer 22 on LAN 12. A document 35 is able to be 
moved, via a <COPY> command from keyboard 25, onto printer icon 38 and will be printed at printer 22. 
Electronic mail is received and sent via a workstation inbasket 33 and outbasket 34, respectively, from and 
to other workstations on LAN 12 or to workstations on other networks via File/Mail/Com server 18. 

55 

B. User Interface For Shared Structured data objects. 

The desktop 32 of workstations 14A and 14B also include a shared structured data object 40, which is 
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shown in larger detail between workstations 14A and 14B. This shared structured data object corresponds 
to a container of related structured data objects, and the data content of the related structured data objects 
enable users at different workstations to work together in real time. The contained bodies of related 
structured data objects need not be mutually exclusive. 

5 In the publication embodiment illustrated here, the shared structured data object 40 is also hereinafter 
referred to as a "shared book", taking the basic attributes of VP "books", explained above. Like a VP book, 
a shared book 40 is a container that has a plurality of related structured data objects which are called 
entries, e.g., VP documents and/or Interpress masters or files. Shared book 40 is shown in half tone, 
indicating that it is a reference icon having a remote location on a remote file service, such as file server 16. 

to However, the implementation of shared books is client-based and runs on workstations 14. 

In the particular embodiment here, shared book 40 shown in Fig. 1 is a local instance of the shared data 
comprising a multi-part publication identified as "Bond Fund Shared Book". A local instance of shared book 
40 may appear at several workstations 14. A user's interaction with shared books 40 is designed to be as 
conventional as possible with the VP metaphor. Standard operations with which the user is already familiar, 

is such as copying and editing of documents, work the same way relative to this shared object as they do on 
desktop 32. 

Shared book 40 has its own window representation 42 (Fig. 2). This representation ts one of various 
types of property sheets, to be discussed, which have been designed to convey a maximum amount of 
useful information in an easily readable format. An entry 44 within shared book 40, e.g. a VP document, is 
20 exactly the same instance as when the entry is on desktop 32. The usual editing, copy, move, and delete 
operations of VP may be applied as long as the user has the proper access rights to an entry 44 in shared 

book 40. . 

A user's access to shared book 40 and its contents comes in two forms. The first form is the standard 
access rights of 'read', 'write', 'add', and 'delete'. A user may not open or view the contents of a particular 

25 shared book without at least 'read' access rights. 

The second form of access rights is specific to the shared books implementation and is a direct 
consequence of its multi-user environment. Each shared book 40 must be protected from multi-users 
simultaneously changing its contents or its properties. This is necessary in order to prevent different users 
from overwriting each other's changes or revisions of shared data. This second form of access is extended 

30 to shared book 40 as a whole, which is an important aspect of this invention. 

The shared book application on workstation 14 is a client-based transaction system wherein transac- 
tions relative to information on a remote file service are implemented by client processes communicating 
with one or more remote file servers, as disclosed in detail in the publications of William H. Paxton entitled, 
"A Client-Based Transaction System To Maintain Data Integrity", CSL-80-3, Xerox Paio Alto Research 

35 Center, March, 1980, also in the Proceedings of the Seventh Symposium on Operating Systems 
Principles, pp. 18-23, December 10-12, 1979, Pacific Grove, CA. Further, the shared book application 
utilizes a simple, conventional database system and database manager to perform this second form of 
access rights. An example of a database system is the Alpine file system disclosed in the publication 
entitled, "The Alpine File System" by Mark R. Brown et al. CSL-84-4, Xerox Palo Alto Research Center, 

40 October, 1984. The Alpine file system provides the programmed utility of providing long term locks on 
designated records in the database or file. Sun Microsystems, Inc. is also offering a database product that 
provides for programmed locking capabilities. 

A simple explanation of file service terminology is as follows. A file service consists of a digital storage 
facility to store large amounts of information in digital form, and the database manager is a^ computer 

45 program facility for accessing, reading, writing and searching records in the database. A "record" is a basic 
data entry unit of a database. Each record contains a number of "fields" which store information about the 
content of a record or are the record content per se. A number of similar records, therefore, comprise a 
"database", also referred to as a "file". A "transaction" is a set of steps or procedures which take the 
database, or a record therein, from one consistent state to another consistent state by modifying the fields 

so of one or more records. Using one of the above mentioned file systems, it is possible to lock out a record 
being accessed and used by a user while all other records remain accessible to all other users. 

Each shared book 40 at the time of its creation has its own record registered with a database service or 
a file service that has database capabilities. A database service supports one or more databases of records. 
In shared books 40. a record is a named property list or a number of "fields" within a particular database. 

55 i.e., a list of attributes characteristic of a record, such as a remote file name, checking in and checking out 
of files and by whom. Each of the properties on the list is tagged with a name. The database service 
supports applications that do simple queries and edits on these records and the actual properties contained 
within each record are, therefore, determined by the particular application. With respect to the shared 
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book's application, some of the properties for shared books 40 are the shared books name, its file service, 
its user access fist, the number of remote versions of each shared book entry to be maintained on the file 
server and notes regarding the entries. 

A database service is specified by the user at the time a new shared book is created. Thereafter, the 

s database service assigns to shared book 40 and each of its entries 44 a distinct record and registers the 
record with this database. The database service then keeps track of which entries 44 are locked and by 
whom. Users cannot explicitly lock shared book 40 per se, but certain user operations, such as pagination, 
can cause shared book 40 to be locked for a brief time as against all users. This prevents two users from 
simultaneously changing the content or attributes of shared book 40 during such an operation. Typically, 

io each organization will share a single database for their publications. Each database service, such as 
supported on file server 16, can support several distinct databases. Each database can support multiple 
shared books 40. Every transaction to be performed in connection with shared book 40 checks first to 
determine whether the shared book's record is available. If it is not, then shared book 40 is determined to 
be locked and the transaction terminates. If the shared book record is available, then the transaction can 

is proceed with shared book updating, if necessary, and further user invoked operations. Locking and 
unlocking a shared book's record is accomplished automatically and is invisible to the user, i.e., the users 
receives no visual indication of record locking or unlocking other than an indication of failed action indicative 
itself of a current locked state. 

Shared book 40 resides in a particular subdirectory on a particular file sen/ice, such as file server 16. A 

20 user specifies the remote location where shared book 40 is to reside at the time the user initially creates a 
particular instance of a shared book 40 from a blank 'shared book 1 prototype shown at 40' in Fig. 3. Shared 
book 40 and all of its related structured data objects or entries therein will be maintained at this specified 
location. The shared books application automatically stores such entries to and retrieves entries from a 
specified file server 1 6. 

25 A blank 'shared book' icon 40' can be electronically retrieved from a prototype folder in the directory 
icon on desktop 32. The prototype shared book icon 40' cannot be opened to view its contents until the 
properties of a shared book 40 have been properly assigned to the .object via a property sheet. A property 
sheet can be obtained by selecting the 'blank shared book' icon 40' and Invoking a <PROP'S> key from 
keyboard 25. The sole purpose of blank shared book 40 is to enable the user to create new shared books 

30 and to obtain local instances of previously created shared books 40. The name "Blank Shared Book" is 
reserved for this prototype 40' so that when a shared book 40 is created, a different name must be given to 
prototype 40'. 

Shared book 40 may contain many different types of structured data objects. This allows the user to 
maintain in one location both the files that make up a publication and the publication support files. Among 

55 the permissible types of such objects that may be placed in shared book 40 are VP documents with 
graphics. VP documents of simple text. ASCII and Wordstar files, mail notes, spelling and hyphenation 
dictionaries and VP spreadsheets. Two types of structured data objects are not allowed in a shared book 
40. Shared books do not have hierarchical capabilities, hence container type structured data objects may 
not be placed in shared book 40. This class of structured data objects includes folders, record files, books. 

40 and shared books themselves. The second kind of structured data objects that are not allowed in shared 
books 40 are reference icons. 

Fig. 2 shows an open shared book window 42, which is invoked by the function key <OPEN> from 
keyboard 25. Shared book window 42 contains a listing of all entries 44 that are contained in shared book 
40. Each entry 44 corresponds to a part of a publication, for example, and the entries are displayed in the 

45 order of their appearance in the publication. In this manner, window representation 42 resembles a table of 
contents. However, this representation goes beyond content identification. All entries 44 are owned by 
shared book 40, i.e., entries 44 are stored with the real, remote shared book 40 at server 16. Users can 
either modify entries 44 within shared book window 42 by invoking the <OPEN> command from keyboard 
25 on a previously selected entry 44 or they can <COPY> entries 44 to their desktop 32, edit them, and 

so then <COPY> entries 44 back into shared book 40. Alternatively, the shared book application can function 
to produce a separate independent window on desktop 32, such as window 35B in Fig. 1 , vis k vis window 
42, upon invoking the <OPEN> command from Keyboard 25 on a previously selected entry 44. This 
function is similar to function selection of an iconic representation and invoking an <OPEN> command. 
Each entry 44 is classified under the column headed by "Class" in property sheet 42 as being either a 

55 "Body" entry 46 or an "Auxiliary" entry 48. Body entries 46 comprise the data content 44, which are 
generally comprised of the publication content, such as VP editable documents. Body entries 46 participate 
in pagination, table of contents generation, and index generation. Auxiliary entries 48 are aids or other 
information used or referred to in creating entries, such as, index exception/inclusion dictionaries, Interpress 
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files, and correspondence related to the publication comprising entry bodies 46. It is up to the user to 
classify entries as being either "Body" or "Auxiliary". The default classification for a new entry 44 is 
"Body". 

Shared book window 42, besides containing the names of entries 44 under the column, "Name" and 

s classes 46 and 48 under the column, "Class", includes information about entry lock status, such as by the 
presence or absence of the lock icon 92 in Fig. 2 next to the first named entry, a revision number for each 
entry under the column, "Rev", which is a number that will be incremented when an edited entry is 
"Saved", which operation will also make the revision available to other users, a creation date at 72 under 
column, "Created" which is the timestamp of the most recently saved revision, the number of pages at 73 

io for each listed entry under the column, "Pages", and a column for "Notes" at 64 relative to each entry for a 
user to enter status information or other comments about entry 44. 

Shared books 40 have two different kinds of property sheets: (1) Shared book property sheet 50 is 
shown in Figs. 3 and 4. This property sheet provides access to parameters or attributes of shared book 40. 
(2) Entry Details property sheet 60 is shown in Rgs 5 and 6. This property sheet provides access to 

75 parameters or attributes of an individual entry 44, e.g., the entry's access list, whether the entry is locked, 
identity of who last locked it, when the entry was locked and why the entry was locked, i.e., an explanation 
to other users what the user is currently doing with the entry. Each entry 44 within shared book 40 has a 
Details property sheet 60 associated with it. Property sheets 60 are distinct from any application-specific 
property sheets for files stored in shared books 40. The shared book property sheet 50 has two different 

20 . versions, depending on whether the shared book is a prototype 40 or an instance of a real, remote shared 
book 40. 

For the most part, shared book window 42 displays most of the information about each entry 44. Entry 
Details property sheet 60 displays more infrequently needed information about an entry, e.g., an entry's 
access controls at field 68. 

25 The Blank Shared Book property sheet 50A, shown in Fig. 3, is obtained by the user selecting a 
prototype shared book from the prototype directory and copying it to the desktop and thereafter selecting 
and invoking the <PROP"S> command on the copied prototype shared book. The name field 51, notes field 
52, database field 53, and remote location field 54 are editable. Sheet 50A also includes fields for indicating 
the number of entries contained in a shared book at59A, the total number of disk pages of the shared book 

30 at 59B and the total number of actual pages at 59'. Property sheet 50A enables the user to create new 
shared books and new instances of already existing remote shared books by filling in these fields with field 
data of an existing shared book,, assuming such a user has appropriate access rights. 

Shared book property sheet SOB, shown in Fig. 4, is obtained when a user selects shared book 40 and 
either invokes the <PROP'S> command, as previously mentioned, or selects the "Shared Book Properties" 

35 command 81 in shared book auxiliary menu 80 shown in Fig. 9. Menu 80 is revealed by the selection of 
command symbol 43 in header 41 of open shared book window 42, as seen in Fig. 9. 

Shared book property sheet SOB contains fields for those items that concern the shared book as a 
whole. As previously indicated, these, for example, include the shared book's name, its file service, its 
database, its access list, the number of remote consecutive versions of each shared book entry to be 

40 maintained on file service 16, and shared book notes. The access list field 56 is the list of individuals or 
groups of individuals who may access entries 44 in the shared book 40. The number of remote versions to 
keep field 55 allows the user to keep previous versions of an edited entry on remote server 16. The notes 
field 52 may be used to keep a brief comment about the project contained in shared book 40. 

Three items in shared book property sheet SOB shown in *Fig. 4 can be edited by any user, provided 

45 that the user has the proper access rights to the shared book. The editable items are the notes field 52, the 
maintained number of remote versions field 55, and the access list field 56. Editable fields are indicated in 
property sheet 50 B by having outlined boxes around the fields. These items can be edited whenever 
property sheet SOB is opened. If shared book 40 is locked, property sheet SOB cannot be opened. Shared 
book 40 is not locked while property sheet SOB is open. It is possible that an operation initiated by another 

so user could cause shared book 40 to be locked at the same moment that the first user, having made some 
changes to property sheet 50B f invokes the command symbol "Done" at 58 in property sheet header 57. In 
this case, the first user will receive a message on desktop 32 that the attempted changes to sheet SOB will 
be aborted and, in any case, property sheet SOB will remain in its open state. The first user may close 
property sheet SOB and try again later. 

55 Entry Details property sheet 60 shown in Rgs. 5 and 6 is obtained when a user selects a shared book 
entry, as indicated at 44A in Rgs. 5 and 6, and invokes the "Show Details" command symbol 45 in header 
41 of shared book window 42, shown in Rg. 2. There are two different versions of property sheet 60 
depending on the locking state of an entry 44 at the time of invoking this command. All versions of entry 
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Details sheet 60 contain fields for the entry's name at 71, class at 62, revision level at 65 and last 
modification date at 658, size at 73, identity of locking user 70 and time of entry lock at 72 (if not locked, 
identity of who locked it last and when that occurred at 65A in Fig. 5), notes at 64, reasons for locking the 
entry at 66 and access list at 68. The field information is employed by users to build on their own 

5 procedures for tracking the current state of a publication. 

The Notes field 64 and Reason field 66 provide additional basic job management support, such as, for 
example, respectively for annotative and procedural information. Procedural information refers to messages 
about the production process while annotative information refers to messages about the content of the 
publication. The fields relating to access lists and user identities may be employed to support the different 

io roles of users. A user may have several user identities, each with different access rights to shared book 40. 
For example, one identity, "production editor", may be able to change the shared book access list, while 
another identity, "author", is able to edit the shared book entries, and a third identity, "reader", may only 
read entries. Access is discussed in further detail later relative to the Section, "P. Access Rights To Shared 
Books". 

75 Figure 5 shows property sheet 60A for an unlocked entry 44A, which has been selected, as indicated 
by the highlighted strip at entry 44A in window 42. and via the "show details" invoked command 45 (Fig. 2) 
to reveal the sheets window and content. This version of the sheet contains a Lock command symbol 61 , 
which, when selected by the user, locks the access of this entry 44A exclusively to the invoking user. This 
result can also be obtained via shared book window header 41 by first selecting the entry to be locked via 

20 mouse 30 and then invoking the lock command 47 in header 41 in window 42 via mouse 30. All other fields 
in this unlocked entry property sheet 60A are read-only. 

Figure 6 shows property sheet 60B for a locked entry 44B, which has been selected, as indicated by 
the highlighted strip at entry 44B in window 42, and "Show details" command 45 invoked to reveal the 
sheet's window and content. To be noted is that the originally invoked "Lock" command 61 has been 

25 replaced by a "Cancel Lock" command 63. In this state, class field 62, notes field 64, reason field 66, and 
access list field 68 may ail be edited by the user. This editable state is indicated by the outlined boxes 
around these fields. Property sheet 60B for entry 44B locked by a user and appearing on another user's 
workstation 14 will be similar to property sheet 60A in Fig. 5, except that neither the "Lock" command 61 
nor the "Cancel Lock" command 63 are present for this entry property sheet, since entry 44B is locked by 

30 the first user. An important feature of this invention and for this other user is that the name of the user who 
has entry 44B locked is listed in field 70. Also, all fields for these other users are read-only. 

If the user selects an entry 44 and invokes the <PROP'S> command from keyboard 25, then a 
message appears at desktop 32 indicating that the property sheet of the selected entry is not available. The 
user may obtain an "Entry detail" property sheet 60 by selecting the "Show Details" command 45 in header 

35 41 of window 42. It should be noted that if the user has not made an entry selection, invoking of the "Show 
Details" command 45 will yieid an error message on desktop 32, "Please select an entry." If more than one 
entry 44 has been selected in shared book 40, then an error message on desktop 32, "Details may be 
shown for only one entry at a time." will appear. In both of these cases the attempted operation will 
terminate. 

40 If the user's instance of shared book 40 is out-of-date while the shared book window 42 is open, then 
none of the property sheets 60 for any entry 44 can be opened. The first attempt to do so will cause shared 
book 40 to be updated over network 12 via its designated file service, such as file server 16. This is another 
key feature for ensuring that users will work with an up-to-date local instance of a shared book 40. The user 
may then reselect an entry 44 and invoke "Show Details" command 45 again and property sheet 60 will 

45 appear. 

It should be noted that neither shared book property sheet 50 nor entry Details property sheet 60 lock 
shared book 40 while either such property sheet is in its open state. It is, therefore, possible for another 
user to change or modify shared book 40 or a selected entry 44 while either such property sheet is in its 
open state. If this happens, changes that the user has made to the property sheet will be ignored and a 
so message will be posted at desktop 32 informing the user that shared book 40 has been updated and the 
user should try to invoke the same operation again. 

C. Shared Book Implementation. 

55 

Reference is now made to the implementation of shared book relative to functional operation on 
workstation 14 in relation to the remote file services which provide a simple database for the records 
comprising the shared book and each of its entries and storage of entry content. In essence, the 
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implementation is a control system for managing consistent versions of files, the provision for a brief, visual 
representation of the current status of the shared book properties, the list of entries and the entry 
properties, and sharing time among multi-users without the possibility arising that two or more users might 
be enabled to modify the same file or entry concurrently. The consistency is achieved through the display 

5 of a user interface representation among multi-users, which representation is rendered current to users who 
take a predetermined course of action, i.e., invoke a functional operation, relative to the shared book 
implementation. Consistency is paramount so that when a predetermined shared book operation or function 
is invoked, the implementation will check the database file of records to determine if the current status of 
the shared book or any of its entries has changed, and, if so, update the user interface representation 

10 thereof. 

As previously indicated, the implementation is a decentralized client-based system, i.e. is operational 
from workstation .14 and not a remote file service, so that it is not necessary to provide a remote service 
that contains information about the number of versions out on the network, or the workstation location of 
existing versions, or whether existing versions are current or old, or whether or not existing versions should 

75 be updated. In other words, the status information displayed in representation 40 is kept current in a relaxed 
WYSIWIS fashion. The invoking of a functional operation, such as a change or modification to an entry at a 
workstation 14, or the addition of a new entry to shared book 40, is not monitored on network 12 and 
thereafter immediately broadcast to other users such a change in status arising from such an operation, as 
in. the case of a strict WYSIWIS user interface. Rather, status information relative to shared book 40 is 

zo demand updated, i.e. retrieved by the client-based implementation. The representation of that information is 
updated only when a rightful user having the same shared book and its representation invokes an operation 
relative to shared book 40. Thus, there is no danger of invoking an operation relative to out-of-date shared 
book structured data objects since the implementation ensures that an invoking user has current information 
before permitting an operation, dependent upon the currency of such information, to proceed. While the 

25 concept of consistency through read/write transactions in a ciient-based system is not new, e.g., Paxton, 
supra , the concept of providing such consistency continuously relative to predetermined operations 
performed at the client workstation relative to a structured data object, while locking out other transaction 
attempts during consistency updating, is an important aspect of this invention. With the foregoing in mind, 
reference is made to the flowcharts of Figs. 13-15 to further explain these as well as other attributes relating 

30 to the user interface representation of current information and status about a structured data object, such as 
a shared book, to multiple users and sharing consistent versions of related structured data objects, e.g. 
entries, contained in such a structured data object. 

In Fig. 13 there is shown a flowchart which represents the basic transaction occurring during each 
instance of a shared book operation, i.e. upon user invoked operational commands on shared book 40, 

35 wherein such an operation has a requirement or need for current shared book information to implement the 
operation properly. The transaction of Fig. 13 is carried out to completion from START to FINISH with 
performance of the invoked "Do Operation" at 116. The transaction of Fig. 13 can be divided, for 
convenience, into a BEGIN portion and an END portion. The BEGIN portion updates the local copy of 
shared book information, if necessary. The END portion updates the remote instance of a shared book data 

40 file, if necessary, by copying data from workstation 14 to the remote file services. Encompassing these 
updating functions is the locking and unlocking of the shared book's lock. The BEGIN portion is represented 
by functions 110, 112 and 114, and the END portion is represented by the functions 118 and 120. In this 
connection, the implementation for shared books provides arbitration of access to the remote shared book 
data by using a lock on the shared book. The lock is implemented by the database service and is available 

45 over the network. In this manner, any user invoked operation that requires up-to-date shared book data, or 
could possibly effect data changes, such as opening a shared book 40, opening an entry 44, opening the 
shared book property sheet 50 or opening an Entry Details property sheet 60, locking a particular entry 44, 
copying a shared book entry 44 to desktop 32 or copying an entry from desktop 32 back into shared book 
40. causes the implementation to acquire or attempt to acquire a lock on the shared book. If successful, the 

so command is allowed to proceed and the lock is held on the shared book for the duration of the execution of 
the command, after which the shared book lock is released. Otherwise, the user is informed that the shared 
book is currently in use and displays the name of the other user that presently has the shared book locked. 

Locks are specified for the shared book per se or for an entry or entries. The former control is invisible 
to the user, and the latter control is invoked by the user and is visible to all users in their user interface 

55 representation. The former provides for consistent and continuous serialized updating of the shared book 
representation, while the latter gives a user exclusive right over an entry, usually for the purpose of entry 
modification. It should be realized that the shared book is locked only during execution of an operation 
command and the lock, therefore, is usually "short lived", i.e. milliseconds or seconds or minutes, whereas 
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entry locking occurs manually by a user and will remain indefinitely, or at least until invoking of a "Save" 
command on an entry or explicitly cancelling the lock and, therefore, is "long lived", i.e. minutes, days or 
even weeks. The purpose of the shared book lock is to maintain consistency in updating information in the 
relaxed WYSIWIS representation about a shared book without processing further updating information from 

5 another shared book implementation, so that updates to a shared book's data file are serialized by 
transparently acquiring its lock. Once the lock is released, another user instance is free to acquire the 
shared book lock via the next user invoked operation command. 

Upon a user invoked operation command, the implementation will conduct a transaction with the remote 
database service to determine if the shared book is locked, as indicated at decision box 110. If the shared 

io book data file is locked, the task is finished, i.e. aborted, and the user is encouraged to try again. If the 
shared book data file is not locked, then the shared book is locked, as indicated by box 112. Next, the 
current shared book information is obtained from the shared book data file, if necessary, i.e. the information, 
as updated, pertaining to the current list of entries of the shared book and the fields of records pertaining to 
shared book window 42, the shared book property sheet SOB and each shared book entry property sheet 

15 60B. This function is represented by box 114 in Fig. 13. After information updating of the local instance of 
the shared book user interface representation, the task originally invoked by the user is processed, as 
represented by the "Do Operation" of box 116. This task, that will invoke the transaction of Fig. 13, will be 
an operation at the entry level, such as opening an entry, copying an entry, opening an entry Details 
property sheet 60S, locking an entry, paginating one or more entries, or printing one or more entries on the 

20 shared book. There are also some operations relative to the shared book entity per se, such as opening a 
shared book icon 40, opening the shared book property sheet 50B, copying an~entry into or out of the 
shared book, or paginating the shared book or copying the shared book to the printer icon, that will invoke 
the transaction of Fig. 13. 

The next function to occur in the transaction of Fig. 13 is an updating of shared book information, 

25 relative to the local instance, to the remote file service, i.e. to the remote shared book data and database 
files. This is represented by box 118 in Fig. 13. Thus, any local changes to information relating to the 
shared book 40, for example, addition of a new entry 44C to a local instance of shared book 40 or invoking 
a "save" command on an entry 44, will be updated to the remote shared book, after which the shared book 
lock is removed, as indicated at box 120. The transaction is thus completed or FINISH. 

30 Examples of user invoked operations are shown in Fig. 14 and 15 relative to an already selected entry 
44A. Fig. 14 represents the entry level operation for opening an entry 44, via the <OPEN> command, while 
Fig. 15 represents the entry level operation for saving an entry, which is discussed in more detail below. In 
Fig. 14, if a user has opened shared book window 42 and selects an entry and thereafter invokes an 
<OPEN> command from keyboard 25, the BEGIN portion of transaction of Fig. 13 is initiated, determining 

35 the locking state of the shared book data file at 110 and, upon obtaining that lock at 112. updating the local 
instance of its representation at 114. 

At this point, the "Do Operation" 116 is performed, which, in the case here, is the opening of an entry 
44. Some operations, such as, opening an entry, copying an entry out from shared book 40 on to desktop 
32, entry details, ensure the user has made a correct selection by aborting at this stage if the local shared 

40 book data were indeed updated at box 114. If at box 1 1 4 new data were not actually retrieved because 
there were no new data to report, these particular operations proceed as invoked. A check is made to 
determine if a local cache of the entry exists and, if not, the current version of the entry is obtained from the 
remote file service. On the other hand, if a copy of the entry exists at the local instance of the shared book, 
then a check is made to determine if the local instance is up-to-date, i.e., if the version at the remote file 

45 service has a creation date later than the locally cached version. If true, then the implementation will have 
the copy of the more recent version on the remote file service replace the locai copy of the entry. This 
functioning is indicated by box 122 in Fig. 14. Next, the up-to-date entry is opened, which is represented by 
box 124 in Fig. 14. The "Do Operation" 116 having been completed, the END portion of the transaction of 
Fig. 13 is completed with updating of the remote instance of the shared book representation, if necessary, 

so at 118 and the unlocking of the shared book data file of the representation at 120. 

It is of interest relative to this Open Entry example of Rg. 1 4 to note that if the user had not previously 
invoked a Lock Entry operation, the above opened view of the entry in some cases would be a read-only 
version, i.e. not editable. 

In Rg. 15, if a user had locked and/or edited one or more entries of the shared book and desires to 
55 update the remote instance of the entry or entries 44, the user may invoke a "Save" command from header 
41 of shared book window 42, as will be explained in greater detail later. This action invokes the BEGIN 
portion of transaction of Rg. 13 and a determination of the locking state of the shared book at 110, followed 
by the successful seizure of the lock at 1 1 2 and the updating of the local copy of its representation at 114, 
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if necessary If seizure of the lock is not successful, the user is told to try again. At this part, the Do 
LeraS 116 is performed, which, in the case here, is the saving of entry(ies) 44. For each entry that has 
beenTcked by L user, the entry is copied to the remote file service providing an up-to-date remote copy 
T^ X(^ ™ S function is represented by box 126 in Rg. 15. After "Save- function 

s me saved entry or entries are automatically unlocked by the implements, because an entry Save 
ooeraS connotes the completion of the task of entry modification. This is represented by box 128 b Rj 
15 The "Do Operation " 118. having been completed, the END portion of the transaction of Fig. 1 is 
competed with updating of the remote instance of the shared book representation. ,f necessary, at 1 18 and 
thP uniockina of the shared book data file of the representation at 120. 

,„ T fonnte est relative to this Save Entry example of Rg. 15 to note that if the user had not previously 

75 diff Tn1mp"Snt ?nt represented by these two examples is that a shared book's data file and records are 
,ocked o^hatno oTer user can change the status of the shared book while the locking user « changing its 
status or me status of one or more entries, such as. by updating via the "Save" command- 

One point that warrants reiteration is that the transaction of Rg. 13 performed on shared book data f le 
occuTrepeSedly with a series of user invoked operations, i.e. for each user invoked operation tog «d y 
?equ^ shaded book information to be updated for its proper implementation An example ofthis _ , a serai 
rhl^ of user invoked commands of (1) Open Shared Book. (2) Lock Entry. (3) Open Entry. (4) Close Entry, 
ISs^M^W^S^^ m Close Shared Book. There is. here, a series of s,x commands. 
Between the thirc i tToZ command an entry in shared book 40 may be edited. Of these six commands 
fhe^urth and s Wh commands of entry and shared book closure from the representation header 57 are not 
ooe Sons requiring updating of shared book information. However, the other four commands «-<*»™V* 
K3ta*S?2 entry, locking an entry and saving an entry, are operations requiring updating of shared 
ToT^m£Z To thaTthe users of local copies of this information via the shared bo ok user «torf«» 
^SS^-S^Lmt with the current state of user's activities relative to the en*re shared I book ^n 
connect -i* the invoking of each of these four consecutive commands |*J™^£ ^ 
also be invoked four consecutive times, before actual command execubon in ° r . de h r <° C ^ 
Jtatus of shared book information and update the local instance of the shared book o /f h P ; e ^^ 
necessaV and then after command execution, update, if necessary, the remote copy of .the shared book 
SSSL^Slnfl the occurrence of each of these four executed transactions.vjs^s between such 
35 transactions, access to the shared book by other users is denied. 
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D. Creating A New Shared Book. 

A user can create a new shared book 40 by filling in the fields 51-54 of a Blank Shared Book's property 
sheet 5ul shown in Rg. 3. Of the four editable fields, only the notes field 52 lS optiona. The othe three 
S?s £ 53 Td 54 must have valid entries. There is an approximately 100 character limit des.gnated for 

'ThTdatabTse'eld 53 c^Mrom an entry in the user profile that exists on the user's workstation 
<■ 14. .^S^StSSSSlc communication profi.e contains a default database service. A sample entry 
might look as follows: 

» «. — » "Book" hevino 0.*^ 



50 



55 



n the above example, wiin reieiem-c ^ • <y- . , e u aror i hnnk 

Serv ices-PA of the Xerox organisation. The user is free to change this preset v^ue in a °'a n J shared ^book 
property sheet to something different if the user so desires. However, a fully qualified name of the database 

file should be used. 

Remote location field 54 has a rigidly defined format as follows: 

northern -Ssysteme Etoiness Unit- (OSBU) in me organisation -Xerox' in . it* %L 

oSe« are ptSec A ^Ln,. co*sis«n g o, several W. o. «le toiders. each 0. which » con— ,n 
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the folder above it, is permitted, as long as the folder names are separated by slashes ("/"). The fully 
qualified name of the remote file server, i.e. the domain and organisation, must be used. All of the above is 
conventional file and database designation and is well-known file service representation in the art. The 
database service and the remote location of the real shared book may be on the same or different file 
5 services. 

Continuing with Fig. 3, when the user has filled in fields 51-54 and has invoked the "Done" command 
58, the user is asked to confirm the operation. After receiving the confirmation, usually a response "Yes", to 
an inquiry presented on workstation 14, shared book 40 is created in the specified folder in the designated 
remote file drawer with a record for the shared book in the designated database, and the previously Blank 

10 Shared Book prototype 40' is converted into a local instance of the new remote real shared book 40. If the 
user entered the name of a folder that doesn't already exist in the remote location field, a new folder will be 
created and the new shared book will be placed in the folder. The initial access list for a newly created 
shared book 40 is automatically set to that of the folder in which it is placed or a default access list If the 
folder is also newly created, then both shared book 40 and the folder will have the same access list as the 

is container in which the folder has been placed. Also, new shared book 40 will be given the initial revision 
number 1 .0 in property sheet field 59. 

Once the new shared book has been created, its database and remote location are fixed. When 
property sheet SOB of new shared book 40 is opened, such as that illustrated in Fig. 4, these two particular 
fields are read-only fields. If the user desires to move shared book 40 to a different remote location or 

20 database service, then a new shared book must be created. 

The shared book's database record is used by the application to prevent different users having access 
rights from changing shared book 40 at the same time. Each transaction that involves any shared book data 
first attempts to lock the shared book's record. If the record is already locked, a message is posted at 
desktop 32 that gives the name of the user who has the shared book record locked and the length of time 

25 . for which shared book 40 has been locked. A very long time, e.g.,several hours or more, is suspect, and 
might indicate that the user who locked the shared book crashed in the middle of an operation, leaving the 
record locked. 



30 E. Obtaining An Instance Of An Existing Shared Book. 

Typically a shared book will be used by several users working together on a single project, such as a 
publication. Shared book 40 and its entries 44 are stored on a file service so that they are accessible to all 
users of the shared book. All users may have a local instance of shared book 40 on their desktop 32. In this 
35 sense, the shared book 40 is similar to a VP reference folder, previously explained in the Background. 
There are two ways for a user to obtain an instance of an existing shared book 40: 

1) The user may take a Blank Shared Book prototype 40' and edit its property sheet 50A, shown in 
Fig. 3, to point to the real, remote shared book 40 on a designated file service. In this case, only the name 
and remote location fields 51 and 54 need be filled in in sheet 50A. It is not necessary to supply the 

40 database pointer. Any entry in the notes field 52 will be overwritten by the notes in remote shared book 40 
when retrieved. After the user invokes the "Done" command 58, a confirmation message will appear on the 
user's desktop 32. to which the user must invoke an answer, "Yes", in order for the operation to proceed 
further. The confirmation message provides a distinction between an instance of an existing shared book 
and the creation of a new shared book. 

45 This method will create a listing of the entries in the shared book, but will not actually copy the files 
themselves to the user's workstation. This allows the user to conserve local disk space on the user's 
desktop 32 by retrieving only those entries which are actually needed by the user. 

It should be noted that the user must have at least Read access rights to shared book 40. If the user does 
not have sufficient access rights, then an error message is posted and the retrieve operation for shared 
so book 40 will terminate. 

2) The user may initially determine the remote location of shared book 40 and retrieve a copy, via the 
<COPY> command from keyboard 25, of shared book 40 to the user's desktop 32. This method will retrieve 
copies of ail the individual entries 44 to the user's workstation 14. A drawback in employing this approach is 
that all allowable versions of each entry 44 that were stored in the remote shared book will also be copied. 

55* If the shared book is large, the user must make sure that there is sufficient local disk space on the user's 
workstation 14 to accommodate this function. Undesired versions may be deleted from shared book 40 by 
invoking the <DELETE> command from shared book local file 100, which is explained in more detail later. 
It should be noted that local copies of entries 44 will not keep the same version numbers as their real, 
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remote counterparts. Instead, they will be renumbered starting with 1. If multiple versions of an entry 44 are 
copied to the workstation, they will be given successive numbers starting with 1, with the most recent 
version having the highest number. 



F. Adding A New Entry To The Shared Book. 

Reference is now made to F.g. 7 to explain the procedure used for the user to add additional entries 
io 44C to shared book 40. The user selects a file 44C on desktop 32 which contains the material to be added 
to book 40. in the illustration in Rg. 7, the user selects a document 44C, "Addition", on desktop 32 and 
moves it, invoking either the <MOVE> or <COPY> command from keyboard 25. and then selects ,ns,de 
shared book window 42 the entry point between the Chapter 2 and Chapter 3 entries 44 ,n shared book 4* 
New entry 44C will be inserted at this designated point and is registered with the database serv.ce to have 
« its own entry record, and, further, is copied to the real, remote shared book at the remote hie service ^A 
small workstation icon 90 will appear next to new shared book entry 44C. indicatmg to the user tha a loca 
coov of this entry is on user's desktop 32. This is a hint to users viewing the window representation that 
operations involving the entry, e.g.. <OPEN> command, will proceed more quickly because the entry 44C ,s 
also local on desktop 32. As shown in window 42 in Rg. 2. small workstation icon 90 appears next to all 
20 entries 44 whenever such a local copy exists. 

New entry 44C is also initially locked upon insertion into book 40. as md.cated by lock symbol or icon 
92' next to entry 44C in Fig. 7. If the user does not intend to make any changes or modif.cat.ons to new 
'^44(5 then lock 92 should be released. To do this, the user can either select "Save Mlrjorl Region 
command 82 in menu 80 (Rg. 9) or the user may open the entry's Details property sheet SOB (Rg. 6) and 
?*? invoke the "Cancel lock" command 63. . 

It is to be noted that new entries 44C can be added only to an open shared book 40. The user ,s no 
permitted to <COPY> a file onto a closed shared book icon 40. In this manner, it is known the exact 
ordering that additional entry 44C is to take among the other entries 44 of shared book 40. 

For Body entries 46. a user should add the new material at the location in the order in wh«ch the 
material belongs in the shared book publication material. This order is used to determine the sequence o 
page numbers assigned to consecutive entries as part of the pagination process. I However the order of 
entries 44 can be cnanged at any time. The user merely selects the entrv(s) 44 m shared book 
invokes the <MOVE> command, and selects the destination point within the "Name" column of shared 
book 40 between or after other entries. The real, remote shared book 40 on the remote file serv.ce w.ll also 
be updated There are two limitations. First, multiple entries cannot be moved as a group to the end ot 
shared book 40. Second, an entry 44 that is already locked by one user cannot be moved by another user 
until that entry is unlocked by the first user. 

The default class for entries 44 added to shared book 40 is "Body" class 46. Users must employee 
entry Details property sheet 60B for entry 44C if they want to classify a newly added entry as Aux,hary 

If selected and added entry 44C has the same file name as an entry already present ,n shared book 40 
then whether or not entry 44C becomes stored depends on whether the user has the original '"-^-book 
entry of the same name already locked. If the original in-the-book entry isn't locked by the user, ton the 
user will receive an error message at desktop 32 and the operation will terminate If the original 
entry is locked, then this original entry will be replaced by new entry 44C upon MMonrto 
40. The replacement of an entry will occur even if new entry 44C .s of a different file type. The entr> 
ision number will be updated when new entry 44C is saved. The entry's class f.eld 62 and notes field 64 
will not be affected by this change. 

In the user's local instance of shared book 40. the entry list in shared book window 42 will reflect he 
new entry. While the original entry with the same name is deleted from the local instance .t .s deleted 
from the real, remote shared book, provided that the Versions To Keep option fied 55 in shared book 
property sheet SOB is set to two or more versions. Opening the folder 102 of remote files, shown in Rg.12 
and to be discussed in more detail later, will reveal that both the original and new entnes are present. The 
original entry can be copied to desktop 32 from folder 102. This allows the user an opt.on to back out of 
changes that possibly turn out to be undesirable. „„^ M aH 

ss It should be noted that a shared book 40 does have a finite size. Users cannot keep adding entnes ad 
infinitum. There are two limits. The first limit is the amount of available space on the remote file server 
where the shared book is maintained. When the file server is full, no further entries can be added to shared 
bookYo The second limit is the amount of space shared book 40 has available to hold mformaton about its 
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entries. Long entry names, and large access lists will take up available space. This limit is independent of 
the size of the entries -themselves. The amount of space currently used by shared book 40 is shown in 
shared book property sheet SOB, as indicated in Fig. 4 in field 59' labelled, "Shared Book Pages". A shared 
book 40 may have, for example, 128 disk pages available for use. The user should split a shared book into 
s two or more smaller shared books before such a limit is reached. 



G. Locking An Entry Or Entries In A Shared Book. 

70 Locking an entry 44A ensures that no other user will be able to modify the locked entry concurrently. 
The user locks an entry 44 by invoking the "Lock" command 47 in the shared book header 41.,. shown in 
Fig. 2, or the "Lock" command 61 in the entry's Details property sheet 60A, shown in Fig. 5. The instance 
of a locked entry 44 by the user is indicated by the lock icon 92 present in the left end column of shared 
book window 42, such as shown in Figs. 2 and 8. Using the shared book header "Lock" command 47 is an 

75 "accelerator", i.e., it is quicker to select an entry 44 and invoke "Lock" command 47 than it is to open entry 
Details property sheet 60A initially. Also, the header "Lock" command 47 enables the user to lock multiple 
entries 44 at the same time. However, the user is not able to modify the entry's notes field 64 or reason 
field 66 when using the shared book header command method, although these fields may obviously be 
edited later by invoking property sheet 60B. If the entry Details "Lock" command 61 is used, then the user 

20 may supply a reason and notes after an entry 44A is locked. This same information will be displayed to 
other users of shared book 40 when those users open a Details property sheet 60A pertaining to that 
particular entry 44A. After entry 44A is locked, the user may <OPEN> the entry and edit its file. 

As previously mentioned, more than one entry can be selected at one time and locked. However, if it 
happens that no entries are selected, invoking "Lock" command 47 or 61 will yield an error message, 

25 "Please select an entry" and the operation will terminate. Should more than one user attempt to lock an 
entry simultaneously, one user will obtain control of the selected entry, and the other users will be told that 
it is already locked. 

If another user has previously changed the real, remote shared book 40, such as by changing an entry 
44 or in some way altering shared book 40, then a present user's instance of that shared book 40 is not up- 

30 to-date. In this case, the "Lock" command 47 or 61 will not initially function. Instead, shared book 40 will be 
first updated and the originally intended "Lock" selection lost This automatic selection lost is true for all 
shared book commands. After the local instance of the user's shared book 40 has been updated, the user 
can then reselect the desired entry 44 and again seek to invoke the "Lock" command 47 or 61. 

Shared book window 42 indicates which entries 44 are not locked, which are locked by others, and 

35 which ones the user has locked unto himself or herself. In this connection, see, as an example, Figs. 2, 8A 
and 8B. The absence of a lock icon 92 or 94 in front of the entry indicates no one has locked this particular 
entry. The presence of a light gray or halftone lock icon 94 in front of an entry 44 indicates another user 
has locked this particular entry. The presence of a heavy black lock icon 92 indicates that the user has 
locked this particular entry. The user can see who has a given entry locked by opening Details property 

40 sheet 60B of Fig. 4 for the particular entry containing a halftone lock icon 94 and viewing field 70. The 
transition from Fig 8A to Fig. 8B illustrates the result that occurs when the user locks another entry, in this 
case the entry entitled, "Bond Fund End Section" which is now indicated locked by the user with the 
posted lock icon 92". 

45 

H Editing Of Entries within The Shared Book. 

To edit an entry 44 within a shared book 40, the user opens shared book window 42 and selects a 
desired entry 44A. Entry 44A should then be locked as previously described. When the <OPEN> command 

so is invoked on a selected and locked entry 44B, the view of entry 44B replaces the workspace of shared 
book window 42 or, alternatively, a new window 35B is created on desktop 32 within which entry 44B is 
viewed and edited. If entry 44B is a VP document and <OPEN> is invoked without having been locked, the 
standard edit command will be missing from the VP document header so that the entry will not be editable. 
The user may also edit an entry 44 on desktop 32 outside of the shared book. The first step to 

55 accomplish this function is to <COPY> an entry 44 onto desktop 32. Note that the entry does not need to 
be locked in order to accomplish this function. Once on desktop 32. entry 44 can be edited like any normal 
VP document. The final step is to <COPY> edited entry 44 back into shared book 40. For this operation, 
the same named entry inside shared book 40 must be locked, as previously indicated. The original entry in 
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book 40 will then be replaced by the updated entry on desktop 32. which .s moved or copied into book 40 
If the same named entry 44 in shared book 40 is not locked, then the user will rece.ve on desktop 32 the 
messaae "The entry already exists and is not locked by you!" and the operation will terminate. 

Although it is permissible in this second method to wait until entry 44 is ready to be copied back ; into 

5 shared book 40 before locking it. it is not advisable. While the entry is unlocked, another user can lock the 
same entry in shared book 40 and perform editing functions on the entry. This could lead to complications 
when the first user copies an edited version back into shared book 40. 

An entry 44 that has been edited but not yet saved will have a " + " sign 49 appended to the version 
number in shared book window 42. Sign 49 will appear when window 42 is redisplayed after entry editing 

10 This is a visual indicator to the user that the local entry has a more recent date than its remote counterpart 
on the file service and that a "Save" operation should be accomplished at some time. 

Note that an entry 44 may not, under some circumstances, be able to be opened. This will happen if 
the database record is unavailable. Another case is if the local instance of an entry 44 is not the most 
recent but there is insufficient disk space on the user's workstation to retrieve the latest vers.on. For all of 

is these cases, an error message is posted to desktop 32. 



I. Saving An Entry Or Entries In A Shared Book. 

Shared books 40 have two menu commands in menu 80 for saving entries: "Save Minor Revision- 
command 82 and "Save Major Revision" command 83 as shown in Fig. 9. The only difference between the 
operation of these two commands is the manner in which they update the shared book's revision number at 
field 59. The shared book's revision number at 59 is displayed in the shared book property sheet 50B and 
is maintained solely by the application. • • „ „ m ^ ar nf ,„ 

It should be noted that shared book's revision number 59 is distinct from the revision number of an 
individual entry 44. The former represents the state of the publication that shared book 40 represents and 
can be employed to distinguish between minor and major revision levels. The entry's revision number, 
shown at field 63 in Fig. 60B. represents a particular instance of an entry 44B. 

A shared book's revision number 59 is maintained in the form "m.n". where "m" is the major revision 
number and "n" is the minor revision number. "Save Major Revision" command 83 sets m and n using 
the rule: 

m-m + 1 (1) 
n-0 

"Save Minor Revision" command 82 sets "m" and "n" using the rule: 

m-m (2) 
n— n + 1 

The entry's revision number 63 is increased each time the user edits an entry and saves the entry. The 
entry's revision number 63 is the same as the entry's remote storage version number, which is maintained 
by the file service. The entry's revision number 63 is maintained by shared book 40. This means, for 
instance, that the entrys revision number 63 does not accompany an entry 44B copied from a local shared 

45 book40 *° v d J^° n P u ^ er Qf ^ enfry ^ containe£j in snared book 40 is maintained in the form "k", and is 
set by both the "Save Minor Revision" and "Save Major Revision" commands 82 and 83 according to the 
rule: 

50 k-k + 1 (3) 

The above three rules. (1). (2) and (3), are applied only if entry's) 44, bei "9 «ved ^ changed or 
have been modified after they were locked. The revision numbers 63 of entry(s) 44 and o shared book 40 
are not updated if entry(s) 44 was not modified. Changes to property sheets 50 and 60 oi *J* 40 
ss and entries 44 will not by themselves cause the shared book's revision number to be "P^^f^ 
entry will not change the shared book's revision number. Only a "Save SjJ 
book's revision number 59. As an example, there is currently the entry. "Bond Fund Front Section looted, 
as shown in Fig. 2 by lock icon 92 to the left of this entry. The entry's rev.s«on number 63 is currently 2 . 
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as is evident from window 42 and the entry details for entry, "Bond Fund Front Section" in Fig. 6, and the 
shared book's revision number 59 is currently "1.7", as is evident from property sheet SOB in Fig. 4. The 
user selects this entry in shared book window 42 and invokes the "Save Minor Revision 1 command 82 from 
menu 80. This causes the shared book's revision number 59 to be increased to "1.8". and this particular 

5 entry revision number 63 to be increased to n 3 n . Had there been a "Save Major Revision" command 83 
invoked from menu 80 instead of a "Save Minor Revision" command 82, the entry's revision number 63 
would still be set to "3". However, the shared books version number 59 would be increased to "2.0". 

Both of these "Save" commands operate in the same manner with respect to a particular entry 
selection. If there are no entries selected in the shared book, then all entries currently locked by the user 

w will be saved. Entries that are not locked or that are locked by someone else are skipped. If one or more 
entries 44 have been selected by the user before invoking either "Save" command, then the application will 
first check that all entries in the selection are locked by the selecting user. If at least one entry in the 
selection is not locked by the user, then an error message is posted to desktop 32 and the operation 
terminates. If all entries in the selection are locked by the user, then these entries will be saved. 

7S After locked entries have been saved, they will be automatically unlocked. If at least one entry was 
changed or modified while in its locked state, then the real, remote shared book 40 on the remote file 
service will be updated and its revision number 59 will be updated. 



20 J. Deleting An Entry Or Entries Within A Shared Book. 

Deleting an entry in shared book 40 requires the user to lock the entry initially. Once locked, the user 
may delete the entry in the shared book by selecting it and invoking the <DELETE> command from 
keyboard 25. A confirmation message, "Confirm to delete items permanently from shared book?" will 

25 appear at desktop 32, to which the user responds, "Yes", as is known in the VP software system. This 
causes the local copy of the entry, if any exists on user's desktop 32, to be deleted along with the copy or 
copies present on the remote file service; i.e. the entry is completely expunged from shared book 40. 
Furthermore, the entry's record is deleted from the database service. This means the entry is deleted 
without trace from the shared book representation. 

30 Other users of the shared book may still have a locally cached copy of the deleted entry in their 
particular instances of shared book 40. These local, distributed copies of a remotely deleted entry will not, 
therefore, be automatically deleted. Therefore, after deleting an entry, other users should be notified so that 
they can delete their locally cached copies of such an entry. Note that, in some cases, retaining a locally 
cached entry may be an advantage. If an entry has been deleted from its shared book erroneously, another 

35 user may still have a copy in their local instance of shared book 40. The deleted entry could first be 
replaced in the remote shared book and then be copied back into the deleting user's local instance of 
shared book 40 thereby recreating the entry. 

In most VP operations, the <MOVE> command from keyboard 25 will transfer a selected structured 
data object to a new destination while deleting it from the original location from where it was moved. A 

40 notable exception to this action is in the case of a <MOVE> command invoked on a document for transfer 
onto a printer icon for document printing. The <MOVE> command in this case will behave like a <COPY> 
command. In any case, the user can <MOVE> an entry 44 to a new location within shared book 40 and it 
will be deleted from its original position in the shared book. If a location outside of shared book 40 on 
desktop 25 is selected as the destination, then the <MOVE> command operates somewhat differently. In 

45 this case, the <MOVE> command behaves like the <COPY> command, as in the case of printing. Thus, the 
local instance and the real, remote version of the entry are not affected. Only invoking the <DELETE> 
command will permanently delete an entry. 



so K. Deleting A Shared Book. 

There are two methods of shared book deletion: (1) deleting only shared book icon 40 from a user's 
desktop 32, and (2) deleting the real, remote shared book 40 from the remote file service. 

Users will perform the first method when they want simply to delete their instance of shared book 40. It 
55 will not affect other users of the same shared book and the real, remote shared book 40 still exists on the 
remote file service. The deletion is performed by selecting shared book 40 on desktop 32 and invoking the 
<DELETE> command. This will delete the shared book container and all the entries it contains from the 
user's desktop 32. 
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Users will perform the second method when they want to delete the real, remote shared book 40 from 
the remote file service. This will affect other users of shared book 40. If other users attempt to use the.r 
local instances of shared book 40 after the real, remote shared book is deleted, they will rece.ve an error 
message at their desktop 32 to the effect that the real, remote shared book doesn't ex.st anymore. 

It is possible to delete the real, remote shared book 40 by simply opening a path to its remote location 
on the remote file service and deleting the remote shared book remote instance. However, this will not 
delete local instances of shared book 40 from user's desktops 32. nor will it delete the shared book s or its 
entries' records from the database service. 

Thus, the recommended procedure for deleting the real, remote shared book .s. first, to notify all users , who 
have access to shared book 40 that the remote instance of the shared book is going to be deleted. Next, a 
of the shared book's entries should be locked and deleted from shared book window 42. This acton will 
delete the entries' records from the database service. Then, all local instances of the shared book can be 
deleted from al users' desktops 32 by the respective users. Finally, the now empty real, remote shared 
book can be deleted from the remote file service. 

L. Pagination And Page Numbering. 

Pagination is the same as is already known and accomplished in VP Books, mentioned I In the 
Background, except that only qualified Body entries 46 in shared book 40 are paginated. The ^rence 
between paginating entries in a shared book 40 and paginating files in a VP folder ,s that ,r .shared book 40 
page numbering can continue across document or entry boundaries. As m the case of VP Books, only VP 
documents are affected by pagination. Other file types, even if classed as Body entr.es 46 by the user are 
ignored by the pagination operation. All Body entries 46 in shared book 40 may be paginated at once by 
selecting closed shared book icon 40. However, a user may also select and individually paginate indrndual 
entries 44 in an open shared book 40. This is useful when there is a need to print only selected entr.es 
during the course of publication preparation. if th* 

Thus, if the shared book 40 is closed and paginated, then all Body entries 46 will be affected. K the 
shared book is open, then entries that are selected by the user are paginated VP docurnento that are 
classed as Auxiliary entries 48 will be ignored. All Body entries 46 in a shared book must be locked m order 
correctly to paginate the publication represented by shared book 40. Pagination edits the files and 
therefore, entries 46 must be locked in order to edit them. The pagination operat.cn will automatically ock 
mose Body entries 46 that are not already locked. In the case of closed shared book 40. * Body en fries 
will be locked, while in the case of an open shared book only all entries 44 selected by the , user will be 
,ocked. in both cases, if another user already has one or more of the affected Body entries 46 locked, ^as 
indicated by the presence of a halftone lock icon 94. then the pagination operation w.ll term.nate before any 

Pa9 Wnrtht e Body C e e ntries are being checked and locked, shared book 40 itself is locked. This means that 
other users cannot use the real, remote shared book on the remote file service while the pagination 
operation is checking and paginating Body entries 46. When pagination is "^J**^ 
shared book 40 is released. Other users can then copy or edit the remaining entnes 48 while the actual 
pagination is being performed on the Body entries 46. m 

The pagination itself is performed in the background. The user can do other work on workstation 14 
while the shared book's Body entries 46 are being paginated. After the pagination operation has been 
accomplished, the user must unlock each of the entries 46 that were locked for pagination. 

Page numbering is accomplished in the same manner as in VP Books, referenced in the Background. 
As is known in VP Books, page numbering will be the same as in regular documents with one exception. If 
an entry 44 in shared book 40 has the page numbering parameter in its initial Page Format Properties 
Sheet (not shown) set to "CONTINUE", then, after pagination, the page number of the first page . ol jha 
entry will be the number following the number of the last page of the previous entry in shared book 40. I 
the parameter is set to "NONE" or "RESTART", behavior is the same as if the entry had been outside of 
share? book 40. Invoking "NONE" turns page numbering off. and "RESTART" forces the page number 
back to the number set in the page format property sheet. All other aspects of the page format property 
sheet remain the same as in regular documents. , . , „„ 

The "CONTINUE" option described above takes effect only if the shared book is closed and page 
numbering is being performed on the whole shared book. If individual entries in the open shared book are 
setected and paginated, then the number of the first page of each VP entry ,n the selection will be 1. 
Invoking "NONE" and "RESTART" will behave in the manner as just described. 
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M. Manipulation Of A Shared Book. 

Operation on an entire shared book can be accomplished by selecting shared book icon 40 and 
invoking an operation. The user can also select the closed shared book icon 40 and invoke a <COPY> 

5 command with destination to printer icon 38 and the publication represented by the icon will be printed with 
pagination preceding printing, if necessary. The user may print an entry 44 in shared book 40 by selecting 
the entry, invoking the <COPY> command from keyboard 25, and selecting printer icon 38 on desktop 32 
as the destination. Entry 44 can be a Body entry 46 or an Auxiliary entry 48. The user may print the current 
version of the entire publication by selecting all Body entries 46 that make up the publication and invoking a 

io <COPY> command with destination to printer icon 38. 

It should be noted that copying shared book icon 40 to printer icon 38 results in printing only Body 
entries 46, not the Auxiliary entries 48. A <MOVE> command will operate in the same manner as a 
<COPY> command. Because printing gives the user an option of repaginating the files which are to be 
printed, those entries 46 which are printed will be automatically locked to the user. After the printing 

75 operation has been completed, the user should unlock the locked entries 46. 



N. Manipulation Of The Local Files Of A Shared Book. 

20 Users can manipulate a shared book's local entries 44 by opening a folder 100 of local files containing 
shared book entries 44, as shown in Fig. 11. There are two ways to accomplish this task. The first way is to 
select the "Show Local Files" command 84 from the closed icon pop-up menu 86, illustrated in Fig. 10. 
This menu 86 can be obtained in two ways: (1) by chording over shared book icon 40, or (2) by invoking 
the "shift" key from keyboard 25 and then concurrently invoking the left mouse button of mouse 30 over 

25 icon 40. The second way is to use the same "Show Local Files" command 84 in the shared book's auxiliary 
menu 80, illustrated in Fig. 9. 

An example of a folder 100 of local files is shown in the window representation of a folder in Fig. 11. 
The primary purpose of local file folder 1 00 is to allow the selective and quick clean up of a user's desktop 
32. This is accomplished by direct deleting of entries 44 within folder 100. Files deleted in this manner are 

30 not deleted from the remote file service. Users may also <COPY> or <MOVE> entries 44 from folder 100 to 
desktop 32. However, users may not <COPY> or <MOVE> entries 44 into folder 100 from desktop 32. The 
command, <PROP'S>, is also disallowed for folder 100. These restrictions help maintain the shared book's 
consistency. When a shared book is copied from its remote location to the user's desktop 32, all versions of 
each entry 44 that were stored in shared book 44 are also copied to the desktop. Thus, an important 

35 function of folder 100 of local files is to delete all but the current version of each entry 44. 



0. Manipulation Of The Remote Files Of A Shared Book. 

40 Users can manipulate a shared book's remote entries, i.e. the ones contained in the real, remote shared 
book on the remote file service, by opening a folder 102 of local files containing remote shared book entries 
44, as shown in Fig. 12. This folder 102 is activated by selecting the "Show Remote Files" command 85 
from either the icon pop-up menu 86 in Fig. 10 or the shared book's auxiliary menu 80 in Fig. 9. 

An example of a folder 102 of remote files is shown in the window representation of a folder in Fig. 12. 

45 Users may <COPY> entries 44 from folder 102 to desktop 32 or book 40. Users may not <DELETE> or 
<MOVE> entries 44 from or into folder 102, nor may they <COPY> entries into folder 102. The command, 
<PROP'S>, is also disallowed. As previously indicated, these restrictions are for maintaining shared book 
consistency. A primary purpose of folder 102 of remote files is to obtain previous versions of entries 44 
being maintained at the remote shared book location. As previously indicated, the number of versions that 

so are kept in shared book 40 is determined by the selection number inserted in the "Versions To Keep" field 
55 in shared book property sheet SOB. The user can change this field value at any time. 



P. Access Rights To Shared Books. 

A user's interaction with a particular shared book 40 is controlled by the access rights the user has for 
that shared book. A user must have, at the minimum. Read access to be able even to open shared book 40 
and view its contents in window 42. Write and Add access in field 56 are requisites for storing an entry 44 

25 



8NSOOCIO: <EP 0319232A2> 



EP 0 319 232 A2 



in a real remote shared book at the remote file service. Remove access is required to delete an entry 44 
fromThe remote shared book at the remote file service. HnaHy. Owner access is needed to change or 

m ° d Each he en a S e 44 hasl Sn access list, which can be different from the shared book access list in which 
5 the entty ^ contained. A user may have full access to one entry. Read-only access to another and no 
accessTo a fflri entry, all within the same shared book 40. Usuaily, however a user w* have the same 
access riahts to an entry 44 as the user has for shared book 40 in wh.ch the entry 44 .s located. 

%lTl nL sZ76 book 40 is created, it is automatically assigned the access list of the remote file 
drawer o? folder that contains the shared book. This appears in field 56 of the shared book's property sheet 
70 SOB shown in Fig. 4 as: 

AC T^T^LTT^Ls, ng shared bo*-* is given the same access Hst as the remote sh,ed 
book A new entry 44C is initially given the access list of the shared book wNjn J '"^ 
shared book. This also appears in access field 68 in entry Details property sheet SOB shown m Fig. 6 as 

" ^Ts^dto^operty sheet SOB in Fig. 4. access list fieid 56 is always editable. £ 
open property sheet 50B can edit this field. However, if the user doesn't have <^."0h* E= ^ the 
operatL wm fai. when the user invokes the "Done" command 58. Access tat f-eld 68 ,nan entry Deta, s 
property sheet 60A is read-only if an entry 44A is not locked by the user as per Rg. 6. When the entry .s 

20 locked, the user can make changes to the access list via field 68 in Rg. 6. 

Table 1 



Access rights and Shared Books operations 



25 
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Blank space means the action is not allowed. 



1- can look, but can't change anything 



2- yes, except for changing the ac cess list ^ 

3- yes, but nobody could use the entry because it can't be saved 



50 



4- yes, but only if there are no remote copies of the entry 



5- yes, but you must have write permission for the entry 



55 



6- yes, but you will get an error message because you can't delete old version of the entries 



7- yes 



, but you might get an error message if you don't have write permission for the entry 
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If a new user is given access rights to a shared book 40, it is also necessary that that user be given 
similar access rights to the file drawer or folder on the remote file service for the remote shared book. 

Table I below shows the effect of various combinations of access rights on six standard shared books 
operations. Read. and Write access are the basic access rights, and others should be used only in 
s conjunction with these two access rights. 



Q. Miscellaneous. 

70 The invention couid be implemented in a wide variety of ways. For example, it could be implemented in 
the system described in Foster, G., Collaborative Systems and Multi-user Interfaces, Ph.D. Thesis, 
University of California, Berkeley, Computer Science Division, 1986. This implementation would use 
LOOPS, discussed more fully in Bobrow, D.G. and Stefik, M., The LOOPS Manual, Xerox Corporation. 
December 1983. Loops gauges couid be used, as described in Stefik, M. and Bobrow, D.G., "Object- 

rs Oriented Programming: Themes and Variations," The Al Magazine, 1986, pp. 40-62, at page 58-60. 

Another alternative would be to provide reduced scale representations of the type which include the 
contents of a workspace in shrunken form. 



20 Claims 

1. A method for use in a multi-user collaborative system in which the contents of a shared structured 
data object (40) representing one or more entries can be concurrently accessed by different users 
respectively at a plurality of different workstations (14) coupled to a common network (12), comprising the 

25 steps of: 

displaying at each workstation a local instance of a representation of the shared structured data object 
including data relative to any related structured data objects therein; 

including in the representation a visual indication of activity occurring at other workstations affecting the 
shared structured data objec's status, and the occurrence of modifications to the contents of the entries; 
30 tracking the entries as accessed and modified by respective users and 

posting any changes in status of the representation at any other workstations on the network containing the 
shared structured data object when a user invokes an operation relative to an existing local instance of the 
representation at any one of the other workstations. 

2. The method of claim 1 , including the steps of: 

35 locking up one or more of the entries to prevent access by other users to the locked entries, and 

displaying at each workstation an indication at the representation of the status of any !ocked-up entries, 
including an indication of the locking user. 

3. A multi-user collaborative system employing a shared structured data object having related struc- 
tured data objects capable of being concurrently accessed by different users respectively at different 

40 workstations on a networked workstation environment, the shared structured data object being accessible by 
the users at each of the workstations and at remote file services on the network, means for displaying at 
each of the workstations the current status of predetermined attributes relating to the current status of, and 
modifications made to, the related structured data objects, and means included in display means for 
producing a visual indication of the denial of access to one or more of the related structured data objects by 

45 one or more of the users. 

4. A system as claimed in claim 3, including means at each workstation for updating the status of the 
representations periodically as maintained at each workstation and at the remote file services, means for 
preventing access to the representation at the remote file services by other users at other workstations 
when the updating means is operational relative to a respective user at a respective workstation, the 

so updating means being operational only on a demand notification basis each time a respective user at a 
respective workstation invokes an operation on the shared structured data object if the nature of execution 
of the operation is dependent on the currency of the representation, such that if the version of the 
representation at the respective workstation is not congruent with the version of the representation at the 
remote file services, the invoked operation will be aborted and the representation will be updated. 

55 5. The system of claim 3 or 4, including means at the workstations to update the version of the 
representation at the remote file services when invoked by an operation on the shared structured data 
object by a user. 
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6. The system of claim 4 or 5, wherein one of the operations is the limiting of access of at least one of 
the related structured data objects to the control of the respective user. 

7. A user interface representation for use in a networked workstation environment to provide a 
WYSIWIS abstraction for shared display representation to a plurality of users at different workstations on a 

5 network of collaborative activities being carried out among the users, the representation comprising a 
plurality of fields indicative of the status of the activities and their currency, and means at the workstations 
for updating the representation upon a user-invoked operation relative to the representation. 

8. A multi-user collaborative system including a plurality of workstations connected for communication 
among one another via a network and having a display system for displaying and interacting with structured 

io data objects and comprising: 

a shared structured data object containing a plurality of structured data objects containing linked data; 

means representing the hierarchical structure of the shared structured data object and the contained 

structured data objects for display at each of the workstations, and comprising a current status of 

predetermined attributes of the hierarchical structure and other objects; 
75 remote file storage means for storing the objects and their hierarchical representation means, comprising a 

remote instance thereof for access by users at each of the workstations via the network to provide a local 

instance thereof; 

means at the workstations automatically to update the local instance of the hierarchical representation 
means at a designated workstation to conform to the remote instance of the hierarchical representation 
20 means at the remote file storage if the remote instance thereof contains a more-current status of the 
predetermined attributes, 

the updating means operating only upon application of operational commands to the local instance of the 
hierarchical representation means at the designated workstation, which commands, when invoked, could 
cause a change in the status of at least one of the predetermined attributes of the local instance of the 
25 hierarchical representation means. 

9. The system of claim 8, including means at said workstations for specifying a local instance of a 
structured object attribute in the displaying hierarchical representation means by selecting its location in the 
displayed hierarchical representation means whereby the data of the specified structured object are 
displayed on the workstation, and means for revoking the application of the specifying means when the 

30 local instance is not a current version thereof, and retrieving the current version thereof from the remote file 
storage means. 

10. The system of any of claims 3 to 8 t wherein the structured data objects comprise a plurality of 
documents, or folders containing documents that are linked in a predetermined manner and are hierarchi- 
cally identified in the hierarchical representation means. 
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@ A multi-user data communication system. 



© A multi-user collaborative system in which the 
contents as well as the current status of other user 
activity of a shared structured data object (40) repre- 
senting one or more related structured data objects 
CO in the form of data entries can be concurrently 
^ accessed by different users respectively at different 
^ workstations (14) connected to a common link (12). 
CO The what-you-see-is-what-l-see user interface repre- 
CM sentation of the shared structured data object in- 
0j eludes an ordered listing of such entries that are 
t— maintained by the structured data object, and var- 
W ious attributes of each listed entry, inter alia , the 
O type and class of entry; the revision number of the 
shared structured data object; the number of pages 
ffi and revision number of each structured data object 
entry; the date of creation and last revision of each 
such entry; whether an entry can be accessed by a 



user and, if not, who has prevented such access; 
whether a local instance of an entry is present on a 
user's system; and a provision for miscellaneous 
notes or comments relative to each entry for view by 
other users. Means is provided for maintaining cur- 
rent information relative to the shared structured 
object and its entries on a user initiated demand 
updated basis invoked by a user operation, which 
operation requires updated information to implement 
the operation properly. Further, means is provided 
for locking up one or more data entries by an 
individual user, and thereby preventing access to the 
locked entries by other users, to prevent concurrent 
editing and other changes to the same entries by 
two or more users. In this connection, editing or 
modification cannot be performed by a user until the 
shared structured data object entry or entries have 
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been locked up. Visual indication as to the locked 
state of entries, and other information relative to the 
locking user and the time of lock, are updated and 
displayed in the shared structured data object repre- 
sentation present at user workstations when a user 
invokes a user operation on the shared structured 
data object or its contents. 
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